critical9.3Public exploit code
CVE-2009-2386
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Winds3D Viewer 3 - 'GetURL()' Arbitrary File Download2009-06-08 · remote · multiple · Verified
Impact
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awingsoft | Awakening Winds3d Viewer Plugin | Versions 3.0.0.5, 3.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35764
- http://www.coresecurity.com/content/winds3d-viewer-advisory
- http://www.securityfocus.com/bid/35595
- http://www.vupen.com/english/advisories/2009/1834
- http://secunia.com/advisories/35764
- http://www.coresecurity.com/content/winds3d-viewer-advisory
- http://www.securityfocus.com/bid/35595
- http://www.vupen.com/english/advisories/2009/1834