[SECURITY] [DSA 1567-1] New blender packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1567-1 [email protected] http://www.debian.org/security/ Devin Carraway May 05, 2008 http://www.debian.org/security/faq -...

Stack overflow

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

DEBIAN-CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1102

Blender 2.45 is affected by a stack-based buffer overflow in the imb_loadhdr function triggered by a crafted Radiance RGBE image inside a .blend file, enabling user-assisted remote code execution. The issue stems from improper handling of Radiance RGBE data, as described for CVE-2008-1102, and is...

Stack overflow

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

CVE-2008-0064 is a stack-based buffer overflow vulnerability affecting XnView (versions 1.91/1.92), NConvert 4.85, and libgfl280.dll in GFL SDK 2.870 for Windows. The underlying bug is triggered while processing Radiance RGBE (.hdr) files, allowing a user‑assisted remote attacker to execute arbit...

Stack overflow

Stack-based buffer overflow in the readRadianceHeader function in 1 src/fileformat/rgbeio.cpp in pfstools 1.6.2 and 2 src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2007-2956

Stack-based buffer overflow in the readRadianceHeader function in 1 src/fileformat/rgbeio.cpp in pfstools 1.6.2 and 2 src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2007-2956

CVE-2007-2956 is a stack-based buffer overflow in pfstools 1.6.2 (rgbeio.cpp) and Qtpfsgui 1.8.11 (rgbeio.cpp) triggered by processing crafted Radiance RGBE (.hdr) files, enabling remote code execution. Public references mention the vulnerable readRadianceHeader path and the impact as arbitrary c...

CVE-2007-2956

Stack-based buffer overflow in the readRadianceHeader function in 1 src/fileformat/rgbeio.cpp in pfstools 1.6.2 and 2 src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2007-2956: Undefined Security Weakness

Stack-based buffer overflow in the readRadianceHeader function in 1 src/fileformat/rgbeio.cpp in pfstools 1.6.2 and 2 src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

Apple Mac OS X多个安全漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...

CVE-2006-3501

Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...

CVE-2006-3501

Apple Mac OS X 10.4.7 ImageIO contains an integer overflow in Radiance image handling that can crash or allow arbitrary code execution when viewed by a user. Affected component: ImageIO framework; impact ranges from denial of service (application crash) to possible code execution with user-assist...