CVE-2010-0280

Related Files

Gentoo Linux Security Advisory 201405-23

Posted May 19, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201405-23 - A vulnerability in lib3ds might allow a remote attacker to execute arbitrary code. Versions less than 2.0.0_rc1 are affected.

tags | advisory, remote, arbitrary

systems | linux, gentoo

advisories | CVE-2010-0280

SHA-256 | a625ca18ebf43ec3b64c1856da0bf137bfbeab77530e25c6d4982e5b23354d6c

Download | Favorite | View

Core Security Technologies Advisory 2009.1209

Posted Jan 14, 2010

Authored by Core Security Technologies | Site coresecurity.com

Core Security Technologies Advisory - Google SketchUp is a 3D modeling program designed for architects, civil engineers, filmmakers, game developers, and related professions. Google SketchUp bundles an old version of 'lib3ds', a library used to process 3DS files. This library is being compiled in a way that leads to improper validation of data when importing 3DS files; this condition can be exploited by remote attackers to trigger a memory corruption vulnerability by enticing an unsuspecting user to open a specially crafted 3DS file, possibly leading to arbitrary code execution.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2010-0280

SHA-256 | 2f4f0b2f8e854921c30156980745b90a334a85148a9703a687f78ac65ba78572

Download | Favorite | View