CVE-2010-2322: Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remot...

Security readout for executives and security teams

FastJar 0.98 can mishandle a malicious .jar archive so files are written outside the intended extraction directory. If the tool processes untrusted archives, an attacker could create or overwrite files with the permissions of the user or service running FastJar. Exposure is most likely on legacy systems, build tooling, package workflows, or automation that still uses FastJar 0.98 and extracts archives from untrusted or semi-trusted sources. Treat as a targeted legacy-tool risk. Prioritize remediation where FastJar handles externally supplied archives in automated build, packaging, or server workflows. Mitigation focus: Identify whether FastJar 0.98 is installed or bundled.; Avoid extracting untrusted .jar files with vulnerable FastJar.; Apply vendor distribution updates where available..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.