The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.
https://exchange.xforce.ibmcloud.com/vulnerabilities/33428
http://www.vupen.com/english/advisories/2007/1216
http://www.securitytracker.com/id?1017855
http://www.securityfocus.com/bid/23290
http://www.kb.cert.org/vuls/id/556801