Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
BID:35273
Info
Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
| Bugtraq ID: | 35273 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2011 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2009 12:00AM |
| Updated: | Sep 09 2009 08:41PM |
| Credit: | Diego Juarez from Core Security Technologies |
| Vulnerable: |
Worldweaver DX Studio Player 3.0.29 0 Worldweaver DX Studio Player 3.0.22 0 Worldweaver DX Studio Player 3.0.12 0 |
| Not Vulnerable: |
Worldweaver DX Studio Player 3.0.29 1 |
Discussion
Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
Worldweaver DX Studio Player is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Attackers can exploit this issue to execute arbitrary shell commands in the context of the vulnerable application.
Versions prior to DX Studio Player 3.0.29.1 are vulnerable.
Worldweaver DX Studio Player is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Attackers can exploit this issue to execute arbitrary shell commands in the context of the vulnerable application.
Versions prior to DX Studio Player 3.0.29.1 are vulnerable.
Exploit / POC
Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user into opening a malicious webpage.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following proof-of-concept code is available:
To exploit this issue, an attacker must entice an unsuspecting user into opening a malicious webpage.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following proof-of-concept code is available:
Solution / Fix
Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
Solution:
The vendor has released an update. Please see the references for details.
Worldweaver DX Studio Player 3.0.12 0
Worldweaver DX Studio Player 3.0.22 0
Worldweaver DX Studio Player 3.0.29 0
Solution:
The vendor has released an update. Please see the references for details.
Worldweaver DX Studio Player 3.0.12 0
-
Worldweaver DXWebSetupPlayer.exe
http://www.dxstudio.com/downloads/DXWebSetupPlayer.exe
Worldweaver DX Studio Player 3.0.22 0
-
Worldweaver DXWebSetupPlayer.exe
http://www.dxstudio.com/downloads/DXWebSetupPlayer.exe
Worldweaver DX Studio Player 3.0.29 0
-
Worldweaver DXWebSetupPlayer.exe
http://www.dxstudio.com/downloads/DXWebSetupPlayer.exe
References
Worldweaver DX Studio Player Browser Plugin Remote Arbitrary Shell Command Injection Vulnerability
References:
References:
- DX Studio Homepage (Worldweaver)
- Security Update For 3.0.29 Release Player (Firefox) (Worldweaver)
- CORE-2009-0521 - DX Studio Player Firefox plug-in command injection (CORE Security Technologies Advisories
- CORE-2009-0521 DX Studio Player Firefox plug-in command injection (CORE Security Technologies)