The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-05-29T18:00:00
Updated: 2024-08-07T05:27:54.450Z
Reserved: 2009-05-26T00:00:00
Link: CVE-2009-1792
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-05-29T18:30:00.203
Modified: 2024-11-21T01:03:22.443
Link: CVE-2009-1792
Redhat
No data.