PeaZip Mark-of-the-Web Bypass Vulnerability Allowing Arbitrary Code Execution

A Mark-of-the-Web bypass vulnerability has been identified in PeaZip versions through 10.4.0. This vulnerability allows attackers to circumvent the Mark-of-the-Web protection mechanism. The issue arises when extracting files from a crafted archive that includes the Mark-of-the-Web; PeaZip fails to transfer this mark to the extracted files. As a result, an attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.