[Secure-testing-team] Bug#575741: CVE-2010-0280: Array index error

[Giuseppe Iuculano]

Package: lib3ds
Severity: grave
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for lib3ds.

CVE-2010-0280[0]:
| Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in
| Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a
| denial of service (memory corruption) or possibly execute arbitrary
| code via crafted structures in a 3DS file, probably related to mesh.c.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0280
    http://security-tracker.debian.org/tracker/CVE-2010-0280


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkuvxHAACgkQNxpp46476apkxQCdG7o/h2LxuGqqXbWLl7a+1gmO
aQYAn0IayiOyvMi7MuGt2UbHA5ZS2fA/
=HYKo
-----END PGP SIGNATURE-----