CVE-2009-2261

Related Files

PeaZip <= 2.6.1 Zip Processing Command Injection

Posted Feb 12, 2010

Authored by Nine:Situations:Group::pyrokinesis, jduck | Site metasploit.com

This Metasploit module exploits a command injection vulnerability in PeaZip. All versions prior to 2.6.2 are suspected vulnerable. Testing was conducted with version 2.6.1 on Windows. In order for the command to be executed, an attacker must convince someone to open a specially crafted zip file with PeaZip, and access the specially file via double-clicking it. By doing so, an attacker can execute arbitrary commands as the victim user.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2009-2261

SHA-256 | 707e4841498bdac3329fa0f7e22bc3d0c9b9a42bba87d345bc291f263c5a5231

Download | Favorite | View