CVE-2009-1792

StoneTrip Ston3D products and players are vulnerable to a remote code/injection flaw in system.openURL, allowing arbitrary command execution via crafted sURL. Affected: S3DPlayer StandAlone v1.6.2.4, v1.7.0.1 and S3DPlayer Web v1.6.0.0. Root cause: the scripting function system.openURL does not p...