The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file.
| Software | From | Fixed in |
|---|---|---|
| awingsoft / awakening_winds3d_viewer_plugin | 3.5.0.9 | 3.5.0.9.x |