Lucene search
+L

142 matches found

Prion
Prion
•added 2022/06/14 11:15 p.m.•24 views

Design/Logic Flaw

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS5.4AI score0.00655EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/06/14 10:32 p.m.•47 views

CVE-2022-32242

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

5.7AI score0.00655EPSS
SaveExploits0References2
CVE
CVE
•added 2022/06/14 10:32 p.m.•92 views

CVE-2022-32242

SAP 3D Visual Enterprise Viewer is affected by an HDR parsing vulnerability in Radiance Picture files (.hdr, hdr.x3d). The issue can crash the application and, per ZDI, may allow remote code execution via a write past end of an allocated buffer. Exploitation requires user interaction (the user mu...

5.5CVSS5.4AI score0.00655EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•7 views

CVE-2022-32242: Improper Input Validation

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

5.5CVSS6.5AI score0.00655EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/14 12:00 a.m.•2 views

PT-2022-21173

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue occurs when a user opens manipulated Radiance Picture files, specifically .hdr or hdr.x3d files, received from untrusted sources in the SAP 3D Visual...

5.5CVSS0.00655EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•15 views

The vulnerability of the RADIANCE module, a software component used for creating 3D computer graphics in Blender, arises from integer overflow. This allows an attacker to execute arbitrary code.

The vulnerability of the RADIANCE module in the software suite used to create 3D computer graphics in Blender is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created HDR file...

7.8CVSS7.8AI score0.01806EPSS
SaveExploits1References6Affected Software2
OSV
OSV
•added 2018/04/24 7:29 p.m.•5 views

DEBIAN-CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

7.8CVSS8AI score0.01806EPSS
SaveExploits1References1
NVD
NVD
•added 2018/04/24 7:29 p.m.•20 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS8.1AI score0.01806EPSS
SaveExploits1References3
OSV
OSV
•added 2018/04/24 7:29 p.m.•25 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

7.8CVSS8.2AI score
SaveExploits0References3
OSV
OSV
•added 2018/04/24 7:29 p.m.•8 views

UBUNTU-CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.7AI score0.01806EPSS
SaveExploits1References4
Prion
Prion
•added 2018/04/24 7:29 p.m.•18 views

Integer overflow

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

6.8CVSS7.8AI score0.01806EPSS
SaveExploits1References3Affected Software2
Mend
Mend
•added 2018/04/24 7:00 p.m.•3 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS0.01806EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/04/24 7:00 p.m.•46 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.8AI score0.01806EPSS
SaveExploits1References3
CVE
CVE
•added 2018/04/24 7:00 p.m.•107 views

CVE-2017-2904

Blender 2.78c is affected by CVE-2017-2904 due to an exploitable integer overflow in the RADIANCE loading path when processing HDR assets, leading to a buffer overflow and potential code execution if a user opens a crafted .hdr via the sequencer. Publicly documented remediation in connected sourc...

8.8CVSS7.7AI score0.01806EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2018/04/24 7:00 p.m.•51 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS8.6AI score0.01806EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2018/04/24 12:00 a.m.•3 views

PT-2018-3127

Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description An integer overflow exists in the RADIANCE loading functionality, which can be exploited using a specially crafted '.hdr' file. This can cause a buffer overflow, allowing for code execution under the context o...

8.8CVSS6.2AI score0.01806EPSS
SaveExploits1References87
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/24 12:00 a.m.•3 views

CVE-2017-2904: Integer Overflow or Wraparound

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.9AI score0.01806EPSS
SaveExploits1References2
Talos
Talos
•added 2018/01/11 12:00 a.m.•41 views

Blender Sequencer imb_loadhdr Integer Overflow Code Execution Vulnerability

Summary An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .hdr file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.9AI score0.01806EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2009/04/23 12:00 a.m.•35 views

Ubuntu 6.06 LTS : blender vulnerabilities (USN-699-1)

It was discovered that Blender did not correctly handle certain malformed Radiance RGBE images. If a user were tricked into opening a .blend file containing a specially crafted Radiance RGBE image, an attacker could execute arbitrary code with the user's privileges. CVE-2008-1102 It was discovere...

6.9CVSS6AI score0.03885EPSS
SaveExploits1References3
Gentoo Linux
Gentoo Linux
•added 2009/03/06 12:00 a.m.•25 views

DevIL: User-assisted execution of arbitrary code

Background Developer's Image Library DevIL is a cross-platform image library. Description Stefan Cornelius Secunia Research discovered two boundary errors within the iGetHdrHeader function in src-IL/src/ilhdr.c. Impact A remote attacker could entice a user to open a specially crafted Radiance RGB...

7.5CVSS6.7AI score0.03153EPSS
SaveExploits1
Rows per page
Query Builder