CVE-2017-12081

An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

UBUNTU-CVE-2017-2918

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

UBUNTU-CVE-2017-2902

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

UBUNTU-CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

UBUNTU-CVE-2017-12105

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context...

UBUNTU-CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

UBUNTU-CVE-2017-12100

An exploitable integer overflow exists in the 'multiresloadolddm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

UBUNTU-CVE-2017-2903

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

UBUNTU-CVE-2017-2899

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

UBUNTU-CVE-2017-12081

An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2906

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-2904

Blender 2.78c is affected by CVE-2017-2904 due to an exploitable integer overflow in the RADIANCE loading path when processing HDR assets, leading to a buffer overflow and potential code execution if a user opens a crafted .hdr via the sequencer. Publicly documented remediation in connected sourc...

CVE-2017-12101

An exploitable integer overflow exists in the 'modifiermdefcompactinfluences' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-12086

CVE-2017-12086 affects Blender (open-source 3D suite). The vulnerability is in the BKE_mesh_calc_normals_tessface function, where parsing a crafted .blend file can trigger an integer overflow that leads to a buffer overflow and potential code execution within the application context. User interac...

CVE-2017-2907

CVE-2017-2907 involves Blender (2.78c) where an exploitable integer overflow in the animation playing/multimedia parsing path allows a crafted .avi file to overflow a buffer and execute code. The attacker must entice a user to open the asset; impact is code execution under Blender’s process. Conn...

CVE-2017-12102

CVE-2017-12102 refers to an exploitable integer overflow in Blender 2.78c where the conversion of curves to polygons can overflow, potentially causing a buffer overflow and code execution when a user opens a crafted .blend file or uses it as a library. Public records note this vulnerability along...

CVE-2017-2918

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

CVE-2017-2903

CVE-2017-2903 affects Blender 2.78c, where an exploitable integer overflow in the DPX loading path (triggered by crafted .cin files via the sequencer) can cause a buffer overflow and code execution under the application. Public sources linked to Debian/Mageia/OSV advisories indicate fixes by upgr...

CVE-2017-2901

Blender 2.78c is affected by CVE-2017-2901 due to an integer overflow in the IRIS loader, causing a buffer overflow that can lead to code execution when a user opens a crafted .iris asset via the sequencer. This is a local vulnerability with user interaction required and is addressed by upgrading...