CVE-2009-4588

2010-01-0718:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-4588

buffer overflow

activex control

remote code execution

denial of service

windsply.ocx

awingsoft awakening web3d player

winds3d viewer

nvd

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.928 High

EPSS

Percentile

99.0%

JSON

Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long SceneUrl property value, a different vulnerability than CVE-2009-2386. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
awingsoft:awakening_winds3d_playerawingsoft awakening winds3d playereq3.5.0.0
awingsoft:awakening_winds3d_viewerawingsoft awakening winds3d viewereq3.0.0.5
awingsoft:awakening_winds3d_viewerawingsoft awakening winds3d viewereq3.5.0.0
awingsoft:awakening_winds3d_playerawingsoft awakening winds3d playereq3.0.0.5

CPE	Name	Operator	Version
awingsoft:awakening_winds3d_player	awingsoft awakening winds3d player	eq	3.5.0.0
awingsoft:awakening_winds3d_viewer	awingsoft awakening winds3d viewer	eq	3.0.0.5
awingsoft:awakening_winds3d_viewer	awingsoft awakening winds3d viewer	eq	3.5.0.0
awingsoft:awakening_winds3d_player	awingsoft awakening winds3d player	eq	3.0.0.5