VULNERABILITY INTELLIGENCE
CVE-2009-2386
CVSS score9.3 HIGH
EPSS probability5.12%
CISA KEVNot currently listed
Published2009-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory