Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13 4.23 and 4.26 BETA as used in products including Turbo Searcher allows remote attackers to execute arbitrary code via a large ARJ block.