----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
lib3ds "face_array_read()" Memory Corruption Vulnerability

SECUNIA ADVISORY ID:
SA38185

VERIFY ADVISORY:
http://secunia.com/advisories/38185/

DESCRIPTION:
A vulnerability has been reported in lib3ds, which can be exploited
by malicious people to compromise an application using the library.

The vulnerability is caused due to an array indexing error within the
"face_array_read()" function in lib3ds/mesh.c. This can be exploited
to corrupt memory via a specially crafted 3DS file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 1.3.0. Other versions may
also be affected.

SOLUTION:
Fixed in version 2.0 Release Candidate 1.

Do not process untrusted 3DS files using the library.

PROVIDED AND/OR DISCOVERED BY:
Francisco Falcon, Core Security Technologies

ORIGINAL ADVISORY:
http://www.coresecurity.com/content/google-sketchup-vulnerability

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------