← Back

CVE-2009-2261

nvd nist
Published: Jun 30, 2009Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.

Affected (25)

Products: Giorgio Tani: Peazip
Giorgio Tani
1 product
Peazip
Configuration A
25 vulnerable
Vulnerable SoftwareAffected Versions
Giorgio Tani
Peazip
Up to 2.5.1
Peazip
Version 1.0
Peazip
Version 1.10
Peazip
Version 1.11
Peazip
Version 1.1
Peazip
Version 1.2
Peazip
Version 1.3
Peazip
Version 1.4
Peazip
Version 1.5
Peazip
Version 1.6
Peazip
Version 1.7
Peazip
Version 1.8.1
Peazip
Version 1.8.2
Peazip
Version 1.8
Peazip
Version 1.9.1
Peazip
Version 1.9.2
Peazip
Version 1.9.3
Peazip
Version 1.9
Peazip
Version 2.0
Peazip
Version 2.1
Peazip
Version 2.2
Peazip
Version 2.3a
Peazip
Version 2.4.1
Peazip
Version 2.4
Peazip
Version 2.6.1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.