The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote malicious users to execute arbitrary code via an index value.
samsung smartviewer -