Secunia

A vulnerability has been discovered in multiple Right Hemisphere products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an array indexing error in the 3difr.x3d plugin. This can be exploited to potentially corrupt memory via a specially crafted U3D file.

This is related to vulnerability #7 in:
SA36983

The vulnerability is confirmed in Deep Exploration CAD Edition trial version 6.0.0.5908 and Deep View version 6.0.0.5899. Other products and versions may also be affected.

Solution
Do not process untrusted U3D files.

Provided and/or discovered by
Felipe Andres Manzano

Original Advisory
http://sites.google.com/site/felipeandresmanzano/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area