CVE

Id
39446  
CVE No.
CVE-2009-2011  
Status
Candidate  
Description
Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method.  
Phase
Assigned (20090608)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
434549 39446 CVE-2009-2011 BUGTRAQ:20090609 CORE-2009-0521 - DX Studio Player Firefox plug-in command injection  View
434550 39446 CVE-2009-2011 URL:http://www.securityfocus.com/archive/1/archive/1/504195/100/0/threaded  View
434551 39446 CVE-2009-2011 MILW0RM:8922  View
434552 39446 CVE-2009-2011 URL:http://www.milw0rm.com/exploits/8922  View
434553 39446 CVE-2009-2011 MISC:http://www.coresecurity.com/content/DXStudio-player-firefox-plugin  View
434554 39446 CVE-2009-2011 CONFIRM:http://www.dxstudio.com/forumtopic.aspx?topicid=b4152459-fb5f-4933-b700-b3fbd54f6bfd  View
434555 39446 CVE-2009-2011 BID:35273  View
434556 39446 CVE-2009-2011 URL:http://www.securityfocus.com/bid/35273  View
434557 39446 CVE-2009-2011 SECUNIA:35402  View
434558 39446 CVE-2009-2011 URL:http://secunia.com/advisories/35402  View
434559 39446 CVE-2009-2011 VUPEN:ADV-2009-1561  View
434560 39446 CVE-2009-2011 URL:http://www.vupen.com/english/advisories/2009/1561  View
434561 39446 CVE-2009-2011 XF:dxstudioplayer-shellexecute-command-exec(51035)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43716 JVNDB-2009-004723 Ideal MooFAQ コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の Ideal MooFAQ (com_moofaq) コンポーネントの includes/file_includer.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-2015 39446 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004723.html  View