[ MDVSA-2008:204 ] blender

[dude67]

blender

Stefan Cornelius of Secunia Research reported a boundary error when
Blender processed RGBE images which could be used to execute arbitrary
code with the privileges of the user running Blender if a specially
crafted .hdr or .blend file were opened(CVE-2008-1102).

As well, multiple vulnerabilities involving insecure usage of temporary
files had also been reported (CVE-2008-1103).

The updated packages have been patched to prevent these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-1102
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-1103
_______________________________________________________________________