Executive Summary

This vulnerability exists in radare2 versions prior to 6.1.4 within the PDB parser's print_gvars() function. It allows attackers to execute arbitrary commands by crafting a malicious PDB file containing newline characters in symbol names. These specially crafted symbol names are unsanitized and interpolated into the flag rename command, enabling attackers to inject arbitrary radare2 commands. When a user runs the idp command on the malicious PDB file, these injected commands are executed, leading to arbitrary operating system command execution through radare2's shell execution operator.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is significant as it allows an attacker to execute arbitrary operating system commands on the affected system with the privileges of the user running radare2. This can lead to unauthorized access, data manipulation, system compromise, or further exploitation depending on the environment and user privileges.

Useful 0 Not Useful 0