773 matches found
CVE-2008-1102
Blender 2.45 is affected by a stack-based buffer overflow in the imb_loadhdr function triggered by a crafted Radiance RGBE image inside a .blend file, enabling user-assisted remote code execution. The issue stems from improper handling of Radiance RGBE data, as described for CVE-2008-1102, and is...
CVE-2008-1102: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...
Debian Security Advisory DSA 1039-1 (blender)
The remote host is missing an update to blender announced via advisory DSA 1039-1. Several vulnerabilities have been discoverd in in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerability and Exposures Project identifies the following problems: CVE-2005-3302 Joxean Kore...
Debian: Security Advisory (DSA-1039-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200704-19 : Blender: User-assisted remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200704-19 Blender: User-assisted remote execution of arbitrary code Stefan Cornelius of Secunia Research discovered an insecure use of the 'eval' function in kmzImportWithMesh.py. Impact : A remote attacker could entice a user to...
Blender: User-assisted remote execution of arbitrary code
Background Blender is a 3D creation, animation and publishing program. Description Stefan Cornelius of Secunia Research discovered an insecure use of the "eval" function in kmzImportWithMesh.py. Impact A remote attacker could entice a user to open a specially crafted Blender file .kmz or .kml,...
CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
Design/Logic Flaw
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
DEBIAN-CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
CVE-2007-1253
CVE-2007-1253 affects Blender up to version 2.43, via the kmz_ImportWithMesh.py script. An insecure use of eval() in kmz_ImportWithMesh.py allows a remote attacker to entice a user to open a crafted .kmz or .kml file, resulting in arbitrary Python code execution with the user’s privileges. The vu...
CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
CVE-2007-1253
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
CVE-2007-1253: Improper Control of Generation of Code
Eval injection vulnerability in the a kmzImportWithMesh.py Script for Blender 0.1.9h, as used in b Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted 1 KML or 2 KMZ file...
Debian DSA-1039-1 : blender - several vulnerabilities
Several vulnerabilities have been discovered in blender, a very fast and versatile 3D modeller/renderer. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-3302 Joxean Koret discovered that due to missing input validation a provided script is vulnerabl...
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1039-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1039-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...
Blender 2.36 - .BVF File Import Python Code Execution
Blender 2.36 - .BVF File Import Python Code Execution source: https://www.securityfocus.com/bid/17663/info Blender is susceptible to a Python code-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a Python 'eval'...