Dimension software is affected by an improper input validation vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability changes the security scope and allows a low-privileged attacker to execute code, potentially compromising confidentiality, integrity, and availability.