VYPR

Awakening Winds3d Viewer Plugin

by Awingsoft

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2009-48500.080.64May 7, 2010The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file.
CVE-2009-23860.030.05Jul 10, 2009Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.