RCE in Daz3d Daz Studio

CVE-2009-4148

DAZ Studio 2.3.3.161, 2.3.3.163, and 3.0.1.135 allows remote attackers to execute arbitrary JavaScript code via a (1) .ds, (2) .dsa, (3) .dse, or (4) .dsb file, as demonstrated by code that loads the WScript.Shell ActiveX control, related to a "script injection vulnerability."

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.055 (91.9th percentile) — read the EPSS interpretation.

Affected products

Daz3d Daz_studio — versions 2.3.3.161, 2.3.3.163, 3.0.1.135
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)