critical9.3Public exploit code
CVE-2009-4588
Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AwingSoft Winds3D Player - SceneURL Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
- AwingSoft Web3D Player - 'WindsPly.ocx' Remote Buffer Overflow (PoC)2009-07-10 · dos · windows · Verified
Impact
Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long SceneUrl property value, a different vulnerability than CVE-2009-2386. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awingsoft | Awakening Winds3d Player | Versions 3.0.0.5, 3.5.0.0 |
| Awingsoft | Awakening Winds3d Viewer | Versions 3.0.0.5, 3.5.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35764
- http://www.exploit-db.com/exploits/9116
- http://www.shinnai.net/exploits/nsGUdeley3EHfKEV690p.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51672
- http://secunia.com/advisories/35764
- http://www.exploit-db.com/exploits/9116
- http://www.shinnai.net/exploits/nsGUdeley3EHfKEV690p.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51672