CVE-2017-12103

CVE-2017-12103 affects Blender, specifically v2.78c, where an integer overflow in converting text rendered as a font into a curve can cause a buffer overflow and remote code execution under the application context. The issue can be triggered by opening a crafted .blend file or using it as a libra...

CVE-2017-2918

Blender 2.78c has an exploitable integer overflow in the image loading code that can trigger a buffer overflow and execute code when a crafted .blend file is opened or used as a library. Mitigation is upgrading to upstream Blender 2.79b (as cited in multiple advisories), which fixes the issue. Th...

CVE-2017-12104

Blender includes an exploitable integer overflow in the way it draws a Particle object in Blender 2.78c, enabling a buffer overflow and potential code execution when a crafted .blend file is opened or used as a library. Public advisories (Debian DLA-1465, Debian DSA-4248) indicate this family of ...

CVE-2017-12102

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12103

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context ...

CVE-2017-12081

An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2899

CVE-2017-2899 affects Blender, specifically the TIFF loading path that can overflow an integer and trigger a buffer overflow in Blender 2.78c when processing a crafted TIFF file via the sequencer. The vulnerability could allow code execution in the application's context. Public details identify t...

CVE-2017-12100

An exploitable integer overflow exists in the 'multiresloadolddm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12103

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context ...

CVE-2017-2903

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12104

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

CVE-2017-2901

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2905

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-12082

CVE-2017-12082 affects Blender’s mesh loading: an exploitable integer overflow in the CustomData path can overflow a buffer and allow code execution when a user edits a crafted object in a .blend file linked to an external data source. The issue is triggered via the Blender environment and is tie...

CVE-2017-2908

An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. A...

CVE-2017-2900

Blender 2.78c contains an exploitable integer overflow in the PNG loading functionality. A crafted PNG file can trigger a buffer overflow and allow code execution in the Blender process, via the sequencer. Mitigation: update to Blender 2.79b or newer (fixed in downstream advisories; multiple dist...

CVE-2017-2901

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-12105

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context...