CVEvulnerability

CVE-2009-2261

9.3 HIGH Published 2009-06-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.

Affected configurations

• giorgio tani peazip (<= 2.5.1) • giorgio tani peazip 1.0 • giorgio tani peazip 1.1 • giorgio tani peazip 1.2 • giorgio tani peazip 1.3 • giorgio tani peazip 1.4 • giorgio tani peazip 1.5 • giorgio tani peazip 1.6 • giorgio tani peazip 1.7 • giorgio tani peazip 1.8 • giorgio tani peazip 1.8.1 • giorgio tani peazip 1.8.2 • giorgio tani peazip 1.9 • giorgio tani peazip 1.9.1 • giorgio tani peazip 1.9.2 • giorgio tani peazip 1.9.3 • giorgio tani peazip 1.10 • giorgio tani peazip 1.11 • giorgio tani peazip 2.0 • giorgio tani peazip 2.1 • giorgio tani peazip 2.2 • giorgio tani peazip 2.3a • giorgio tani peazip 2.4 • giorgio tani peazip 2.4.1 • giorgio tani peazip 2.6.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References