PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:04
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.exploit-db.com/exploits/8881 - |
Information
Published : 2009-06-30 10:30
Updated : 2025-04-09 00:30
NVD link : CVE-2009-2261
Mitre link : CVE-2009-2261
CVE.ORG link : CVE-2009-2261
JSON object : View
Products Affected
giorgio_tani
- peazip
CWE
CWE-20
Improper Input Validation