CVE-2009-3576

HIGH · CVSS 9.3 EPSS 3.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-11-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2009-3576

Severity

HIGH

CVSS

9.3

EPSS

3.16%

Java

Original Filing — NVD Description

Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents (aka .scntoc) file with a Script_Content element, as demonstrated by code that loads the WScript.Shell ActiveX control.