DAZ Studio Scripting Support Remote Command Execution Vulnerability

Bugtraq ID:	37176
Class:	Input Validation Error
CVE:	CVE-2009-4148
Remote:	Yes
Local:	No
Published:	Dec 03 2009 12:00AM
Updated:	Dec 03 2009 11:15PM
Credit:	Diego Juarez from Core Security Technologies
Vulnerable:	DAZ Productions DAZ Studio 3.0.1 .135 DAZ Productions DAZ Studio 2.3.3 .163 DAZ Productions DAZ Studio 2.3.3 .161
Not Vulnerable:

DAZ Studio Scripting Support Remote Command Execution Vulnerability

DAZ Studio is prone to a remote command-execution vulnerability because the software fails to properly handle specially crafted files.

An attacker could exploit this issue by enticing a victim to open a malicious document.

Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

DAZ Studio Scripting Support Remote Command Execution Vulnerability

An attacker must entice an unsuspecting victim into opening a malicious file.

The following proof of concept is available:

• /data/vulnerabilities/exploits/37176.ds

DAZ Studio Scripting Support Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DAZ Studio Scripting Support Remote Command Execution Vulnerability

References:

• DAZ Studio Arbitrary Command Execution (Core Security Technologies)
  
• DAZ Studio Homepage (DAZ Productions)
  
• CORE-2009-0911: DAZ Studio Arbitrary Command Execution (CORE Security Technologies Advisories )