Lucene search

K
osvGoogleOSV:DSA-1039-1
HistoryApr 24, 2006 - 12:00 a.m.

blender - several

2006-04-2400:00:00
Google
osv.dev
4

0.022 Low

EPSS

Percentile

89.6%

Several vulnerabilities have been discovered in blender, a very fast
and versatile 3D modeller/renderer. The Common Vulnerabilities and
Exposures Project identifies the following problems:

  • CVE-2005-3302
    Joxean Koret discovered that due to missing input validation a
    provided script is vulnerable to arbitrary command execution.
  • CVE-2005-4470
    Damian Put discovered a buffer overflow that allows remote
    attackers to cause a denial of service and possibly execute
    arbitrary code.

The old stable distribution (woody) is not affected by this problem.

For the stable distribution (sarge) this problem has been fixed in
version 2.36-1sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 2.40-1.

We recommend that you upgrade your blender package.

CPENameOperatorVersion
blendereq2.36-1

0.022 Low

EPSS

Percentile

89.6%