5079 matches found
CVE-2017-2900
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
CVE-2017-2903
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
CVE-2017-2904
An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...
CVE-2017-2905
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
CVE-2017-2907
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...
CVE-2017-2908
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...
CVE-2017-12103
CVE-2017-12103 affects Blender, specifically v2.78c, where an integer overflow in converting text rendered as a font into a curve can cause a buffer overflow and remote code execution under the application context. The issue can be triggered by opening a crafted .blend file or using it as a libra...
CVE-2017-12081
CVE-2017-12081 : Blender 2.78c contains an exploitable integer overflow during the upgrade of a legacy Mesh attribute, causing a buffer overflow and potential code execution when a crafted .blend file is opened or used as a library. Affected: Blender 2.78c; root cause: integer overflow in Mesh at...
CVE-2017-12086
CVE-2017-12086 affects Blender (open-source 3D suite). The vulnerability is in the BKE_mesh_calc_normals_tessface function, where parsing a crafted .blend file can trigger an integer overflow that leads to a buffer overflow and potential code execution within the application context. User interac...
CVE-2017-12101
Blender 2.78c contains an exploitable integer overflow in modifier_mdef_compact_influences that can overflow a buffer, allowing code execution when a user opens a crafted .blend file. The vulnerability is user-triggered (via opening a malicious file) and not required to have network access. Publi...
CVE-2017-12105
Blender vulnerability CVE-2017-12105 (and related CVEs) arises from an integer overflow in applying a specific object modifier to a Mesh, leading to a buffer overflow and potential code execution when a crafted .blend is opened or used as a library. Affects Blender versions around v2.78c (and old...
CVE-2017-2900
Blender 2.78c contains an exploitable integer overflow in the PNG loading functionality. A crafted PNG file can trigger a buffer overflow and allow code execution in the Blender process, via the sequencer. Mitigation: update to Blender 2.79b or newer (fixed in downstream advisories; multiple dist...
CVE-2017-2905
CVE-2017-2905 affects Blender 2.78c, where an exploitable integer overflow in the BMP loading functionality can trigger a buffer overflow and execute code. A specially crafted BMP file could be provided as an asset via Blender’s sequencer to a user, leading to potential code execution in the appl...
CVE-2017-2906
CVE-2017-2906 describes an exploitable integer overflow in Blender 2.78c’s animation playing; a crafted .avi file can overflow a buffer and allow code execution within the application. The issue affects Blender’s ability to process certain multimedia assets, with potential for arbitrary code exec...
CVE-2017-2908
Blender 2.78c contains an exploitable integer overflow in the thumbnail generation path (triggered while rendering a .blend in File->Open dialog), leading to a buffer overflow and potential code execution under the application. Public advisories (e.g., Debian Mageia/OpenVAS records) show this ...
CVE-2017-2918
Blender 2.78c has an exploitable integer overflow in the image loading code that can trigger a buffer overflow and execute code when a crafted .blend file is opened or used as a library. Mitigation is upgrading to upstream Blender 2.79b (as cited in multiple advisories), which fixes the issue. Th...
CVE-2017-2901
An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...
CVE-2017-12103
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context ...
CVE-2017-12102
CVE-2017-12102 refers to an exploitable integer overflow in Blender 2.78c where the conversion of curves to polygons can overflow, potentially causing a buffer overflow and code execution when a user opens a crafted .blend file or uses it as a library. Public records note this vulnerability along...