Luigi Auriemma has reported some vulnerabilities in White_dune, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in "Scene::errorf()" within Scene.cpp can be exploited to cause a stack-based buffer overflow via a specially-crafted .WRL file containing an overly long string.

2) A format string error in "swDebugf()" within DuneApp.cpp can be exploited via a specially-crafted .WRL file containing format string specifiers.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are reported in version 0.29beta791 with vulnerability #1 confirmed in version 0.28. Other versions may also be affected.

Solution
The vendor has released development version 0.29beta795.
Further details available to Secunia VIM customers

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aluigi.altervista.org/adv/whitedunboffs-adv.txt

Deep Links
Links available to Secunia VIM customers