Skip to content
OpenAdvisories

Vendor

PeaZip

5 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • High 8.4

    Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

    Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... -> Associated appl…

  • High 7.1

    PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archiv…

  • High 8.4

    Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

    Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitra…