Search
Find a vulnerability
Search criteria
2 vulnerabilities found for s3dplayer_standalone by stonetrip
CVE-2009-1792 (GCVE-0-2009-1792)
Vulnerability from nvd – Published: 2009-05-29 18:00 – Updated: 2024-08-07 05:27
VLAI
EPSS
VEX
Summary
The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/35105 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/35256 | third-party-advisoryx_refsource_SECUNIA |
| http://www.coresecurity.com/content/StoneTrip-S3D… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/503887/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2009-05-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:27:54.450Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "35105",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35256"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "35105",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35256"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1792",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "35105",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35256"
},
{
"name": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers",
"refsource": "MISC",
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1792",
"datePublished": "2009-05-29T18:00:00.000Z",
"dateReserved": "2009-05-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:27:54.450Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1792 (GCVE-0-2009-1792)
Vulnerability from cvelistv5 – Published: 2009-05-29 18:00 – Updated: 2024-08-07 05:27
VLAI
EPSS
VEX
Summary
The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/35105 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/35256 | third-party-advisoryx_refsource_SECUNIA |
| http://www.coresecurity.com/content/StoneTrip-S3D… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/503887/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2009-05-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:27:54.450Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "35105",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/35256"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "35105",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/35256"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1792",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "35105",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35105"
},
{
"name": "35256",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/35256"
},
{
"name": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers",
"refsource": "MISC",
"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers"
},
{
"name": "20090528 CORE-2009-0401 - StoneTrip S3DPlayers remote command injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1792",
"datePublished": "2009-05-29T18:00:00.000Z",
"dateReserved": "2009-05-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:27:54.450Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}