CVE-2009-1792 | BDVDB-2026-36754 Detail

Description#

The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/35105
http://secunia.com/advisories/35256
http://www.coresecurity.com/content/StoneTrip-S3DPlayers
http://www.securityfocus.com/archive/1/503887/100/0/threaded

Exploit#

No public exploit known

History#

Version 12009-05-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.