Lucene search
MitreCVE-2009-1792HistoryMay 29, 2009 - 6:30 p.m.
CVE-2009-1792
2009-05-2918:30:00
CWE-78
mitre
web.nvd.nist.gov
26
cve-2009-1792
stonetrip
ston3d standaloneplayer
s3dplayer
webplayer
arbitrary commands
remote attackers
shell metacharacters
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.006
Percentile
77.6%
The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).
Affected configurations
Node
stonetrips3dplayer_standaloneMatch1.6.2.4
ORstonetrips3dplayer_standaloneMatch1.7.0.1
ORstonetrips3dplayer_webMatch1.6.0.0
microsoftwindows
Node
stonetrips3dplayer_standaloneMatch1.6.2.4
ORstonetrips3dplayer_webMatch1.6.0.0
applemacos
Node
linuxlinux_kernel
stonetrips3dplayer_standaloneMatch1.6.2.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| stonetrip | s3dplayer_standalone | 1.6.2.4 | cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:* |
| stonetrip | s3dplayer_standalone | 1.7.0.1 | cpe:2.3:a:stonetrip:s3dplayer_standalone:1.7.0.1:*:*:*:*:*:*:* |
| stonetrip | s3dplayer_web | 1.6.0.0 | cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:* |
| microsoft | windows | * | cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
| apple | macos | * | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Related
openvas
openvas
StoneTrip Ston3D Standalone Player Code Execution Vulnerability (Linux)
2009-06-16 00:00:00
StoneTrip Ston3D Products Code Execution Vulnerability
2009-06-16 00:00:00
StoneTrip Ston3D Standalone Player Code Execution Vulnerability - Linux
2009-06-16 00:00:00
nvd
nvd
CVE-2009-1792
2009-05-29 18:30:00
securityvulns
securityvulns
StoneTrip S3DPlayers code execution
2009-05-29 00:00:00
prion
prion
Design/Logic Flaw
2009-05-29 18:30:00
cvelist
cvelist
CVE-2009-1792
2009-05-29 18:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.006
Percentile
77.6%
Related for CVE-2009-1792