← Back

Awingsoft

awingsoft

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Awakening Winds3d Viewer Plugin
awakening_winds3d_viewer_plugin
2 CVEs
Awakening Winds3d Player
awakening_winds3d_player
1 CVE
Awakening Winds3d Viewer
awakening_winds3d_viewer
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4850
1Awingsoft
1Awakening Winds3d Viewer Plugin
Apr 29, 2026
May 7, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file.
CVE-2009-4588
1Awingsoft
2Awakening Winds3d Player
Awakening Winds3d Viewer
Apr 23, 2026
Jan 7, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial o...Show more
Heap-based buffer overflow in the WindsPlayerIE.View.1 ActiveX control in WindsPly.ocx 3.5.0.0 Beta, 3.0.0.5, and earlier in AwingSoft Awakening Web3D Player and Winds3D Viewer allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long SceneUrl property value, a different vulnerability than CVE-2009-2386. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-2386
1Awingsoft
1Awakening Winds3d Viewer Plugin
Apr 23, 2026
Jul 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL metho...Show more
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.Show less