← Database

CVE-2009-2261

CRITICAL CVSS: 9.3 Published: 2009-06-30 Modified: 2026-06-16

Description

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.

Affected Platforms

Giorgio Tani Peazip

Weakness Type

CWE-20

References