Ubuntu Security Notice USN-238-2 – Damian Put discovered that Blender did not properly validate a length value in .blend files. Negative values led to an insufficiently sized memory allocation. By tricking a user into opening a specially crafted .blend file, this could be exploited to execute arbitrary code with the privileges of the Blender user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42871/USN-238-2.txt
Source: https://packetstormsecurity.com/files/42871/Ubuntu-Security-Notice-238-2.html