PT-2010-1658
CVE-2009-4850
·
تاريخ النشر
2010-05-07
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Awingsoft Awakening Winds3D Viewer plugin version 3.5.0.9
Description
The issue allows remote attackers to execute arbitrary programs. This is achieved by setting a
SceneURL property value to a URL for a .exe file, which enables the execution of arbitrary programs.Recommendations
For version 3.5.0.9, as a temporary workaround, consider restricting access to the
SceneURL property to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾