Threats tagged 'ghsa-7rhq-9q45-5gm4'

radare2 versions prior to 6.1.4 contain a command injection vulnerability in the PDB parser's print_gvars() function. This flaw allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field of a maliciously crafted PDB file. When the idp command processes such a file, the injected commands are executed.