CVE-2008-1103

The CVE-2008-1103 entry concerns Blender's undo save quit routine. Affected software: Blender 2.5, 2.63a, and earlier. Root cause: a symlink attack on the quit.blend temporary file enables a local attacker to overwrite arbitrary files. Impact: ambiguity in the description, but the documented effe...

CVE-2008-1103: Improper Link Resolution Before File Access

Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...

Blender radiance_hdr.c文件远程栈溢出漏洞

BUGTRAQ ID: 28870 CVECAN ID: CVE-2008-1102 Blender是一款免费的3D建模软件。 Blender的source/blender/imbuf/intern/radiancehdr.c文件中的imbloadhdr函数存在栈溢出漏洞，如果用户受骗打开了包含有恶意Radiance RGBE图形的特制.blend文件的话，就可以触发这个溢出，导致执行任意指令。 Blender Foundation Blender 2.45 Blender Foundation ------------------...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

Stack overflow

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

DEBIAN-CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Blender 2.45 is affected by a stack-based buffer overflow in the imb_loadhdr function triggered by a crafted Radiance RGBE image inside a .blend file, enabling user-assisted remote code execution. The issue stems from improper handling of Radiance RGBE data, as described for CVE-2008-1102, and is...

CVE-2008-1102: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

Debian: Security Advisory (DSA-1039-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1039-1 (blender)

The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...

GLSA-200704-19 : Blender: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-19 Blender: User-assisted remote execution of arbitrary code Stefan Cornelius of Secunia Research discovered an insecure use of the 'eval' function in kmzImportWithMesh.py. Impact : A remote attacker could entice a user to...

Blender: User-assisted remote execution of arbitrary code

Background Blender is a 3D creation, animation and publishing program. Description Stefan Cornelius of Secunia Research discovered an insecure use of the "eval" function in kmzImportWithMesh.py. Impact A remote attacker could entice a user to open a specially crafted Blender file .kmz or .kml,...

Design/Logic Flaw

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...

CVE-2007-1253

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...

CVE-2007-1253

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...

CVE-2007-1253

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...

DEBIAN-CVE-2007-1253

Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...