CVE-2009-4588

EPSS 32.0%

Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long SceneUrl property value, a different vulnerability than CVE-2009-2386. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/9116unverified exploitdbwww.exploit-db.com/exploits/9116unverified exploitdbwww.exploit-db.com/exploits/16524unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/35764 https://exchange.xforce.ibmcloud.com/vulnerabilities/51672 http://www.exploit-db.com/exploits/9116 http://www.shinnai.net/exploits/nsGUdeley3EHfKEV690p.txt