3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal

source: https://www.securityfocus.com/bid/29749/info 3D-FTP is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues allows an attacker to write arbitrary files to locations outside of the FTP client's...

Blender创建不安全临时文件漏洞

BUGTRAQ ID: 28936 CVECAN ID: CVE-2008-1103 Blender是一款免费的3D建模软件。 Blender在终止的时候创建了/tmp/quit.blend文件，而该文件使用了容易猜测的文件名并使用不安全的文件权限存储临时渲染帧，在自动保存文件时也使用了不安全的文件权限。本地攻击者可以通过符号链接攻击以运行Blender用户的权限覆盖任意文件，或泄露敏感信息。 Blender Foundation Blender 2.45 Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200805-12）以及相应补丁:...

[SECURITY] Fedora 8 Update: blender-2.45-14.fc8

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

[SECURITY] Fedora 7 Update: blender-2.45-14.fc7

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

blender 3D modelling application byffer overflow

Buffer overflow on Radiance High Dynamic Range HDR format parsing...

Blender radiance_hdr.c文件远程栈溢出漏洞

BUGTRAQ ID: 28870 CVECAN ID: CVE-2008-1102 Blender是一款免费的3D建模软件。 Blender的source/blender/imbuf/intern/radiancehdr.c文件中的imbloadhdr函数存在栈溢出漏洞，如果用户受骗打开了包含有恶意Radiance RGBE图形的特制.blend文件的话，就可以触发这个溢出，导致执行任意指令。 Blender Foundation Blender 2.45 Blender Foundation ------------------...

Debian Security Advisory DSA 1039-1 (blender)

The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...

Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bViewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow/b...

Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC ===========================================================...

Viewpoint Media Player for IE 3.2 - Remote Stack Overflow (PoC)

Viewpoint Media Player for IE 3.2 - Remote Stack Overflow PoC ----------------------------------------------------------------------------- Viewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow url: http://www.viewpoint.com Author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2003-1472

The CVE-2003-1472 entry describes a buffer overflow in the 3D-FTP client 4.0. The vulnerability is triggered by a long banner sent by a remote FTP server over the network, leading to a denial of service (crash) and potentially arbitrary code execution. The available records consistently identify ...

CVE-2003-1472

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service crash and possibly execute arbitrary code via a long banner...

CVE-2003-1472: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service crash and possibly execute arbitrary code via a long banner...

CVE-2003-1354

The CVE-2003-1354 issue concerns GameSpy 3D 2.62–compatible gaming servers that respond with very large UDP packets to tiny requests, enabling remote attackers to use these servers as an amplification vector for DDoS attacks with spoofed UDP query packets (illustrated by Battlefield 1942). The vu...

CVE-2003-1354: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

Blender 3D modelling software buffer overflow

Buffer overflow on parsing .blend, .kml, .kmz files...

Debian DSA-1039-1 : blender - several vulnerabilities

Several vulnerabilities have been discovered in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3302 Joxean Koret discovered that due to missing input validation a provided script is vulnerabl...

Blender: Heap-based buffer overflow

Background Blender is an open source software for 3D modeling, animation, rendering, post-production, interactive creation and playback. Description Damian Put has reported a flaw due to an integer overflow in the "getbhead" function, leading to a heap overflow when processing malformed ".blend"...

[Overflow.pl] Blender BlenLoader Integer Overflow

Overflow.pl Security Advisory 4 Blender BlenLoader Integer Overflow Vendor: Blender http://www.blender.org Affected version: 2.x up to and including 2.40pre Vendor status: Notified. No patch available. Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/blenderinteger.txt Date:...

Scorched 3D: Multiple vulnerabilities

Background Scorched 3D is a clone of the classic "Scorched Earth" DOS game, adding features like a 3D island environment and Internet multiplayer capabilities. Description Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several...