Ston3D S3DPlayer Web and Standalone 'system.openURL()' Remote Command Injection Vulnerability

Ston3D S3DPlayer Web and Standalone 'system.openURL()' Remote Command Injection Vulnerability

References:

Microsoft Knowledge Base Article 240797 (Microsoft)
Vendor Homepage (StoneTrip)
CORE-2009-0401 - StoneTrip S3DPlayers remote command injection (advisories@coresecurity.com)

Privacy Statement
Copyright 2010, SecurityFocus