VYPR
Unrated severityNVD Advisory· Published Jun 30, 2009· Updated Apr 23, 2026

CVE-2009-2261

CVE-2009-2261

Description

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.

Affected products

25
  • Giorgio Tani/Peazip25 versions
    cpe:2.3:a:giorgio_tani:peazip:1.0:-:windows:*:*:*:*:*+ 24 more
    • cpe:2.3:a:giorgio_tani:peazip:1.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.10:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.11:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.3:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.4:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.5:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.6:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.7:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.8.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.8.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.8:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.9.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.9.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.9.3:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:1.9:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.0:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.2:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.3a:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.4.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.4:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:2.6.1:-:windows:*:*:*:*:*
    • cpe:2.3:a:giorgio_tani:peazip:*:-:windows:*:*:*:*:*range: <=2.5.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.