Lucene search
+L

113 matches found

NVD
NVD
added 2022/06/14 11:15 p.m.26 views

CVE-2022-32242

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

5.5CVSS0.00636EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/14 11:15 p.m.6 views

CVE-2022-32242

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

5.5CVSS5.4AI score0.00636EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/06/14 11:15 p.m.18 views

Design/Logic Flaw

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS5.4AI score0.00636EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/14 10:32 p.m.40 views

CVE-2022-32242

When a user opens manipulated Radiance Picture .hdr, hdr.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

5.7AI score0.00636EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/14 10:32 p.m.80 views

CVE-2022-32242

SAP 3D Visual Enterprise Viewer is affected by an HDR parsing vulnerability in Radiance Picture files (.hdr, hdr.x3d). The issue can crash the application and, per ZDI, may allow remote code execution via a write past end of an allocated buffer. Exploitation requires user interaction (the user mu...

5.5CVSS5.4AI score0.00636EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.11 views

The vulnerability of the RADIANCE module, a software component used for creating 3D computer graphics in Blender, arises from integer overflow. This allows an attacker to execute arbitrary code.

The vulnerability of the RADIANCE module in the software suite used to create 3D computer graphics in Blender is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created HDR file...

7.8CVSS7.8AI score0.01841EPSS
SaveExploits1References6Affected Software2
NVD
NVD
added 2018/04/24 7:29 p.m.15 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS8.1AI score0.01841EPSS
SaveExploits1References3
OSV
OSV
added 2018/04/24 7:29 p.m.3 views

DEBIAN-CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

7.8CVSS8AI score0.01841EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/24 7:29 p.m.22 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

7.8CVSS8.2AI score
SaveExploits0References3
Prion
Prion
added 2018/04/24 7:29 p.m.15 views

Integer overflow

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

6.8CVSS7.8AI score0.01841EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2018/04/24 7:29 p.m.5 views

UBUNTU-CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.7AI score0.01841EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2018/04/24 7:00 p.m.39 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.8AI score0.01841EPSS
SaveExploits1References3
CVE
CVE
added 2018/04/24 7:00 p.m.96 views

CVE-2017-2904

Blender 2.78c is affected by CVE-2017-2904 due to an exploitable integer overflow in the RADIANCE loading path when processing HDR assets, leading to a buffer overflow and potential code execution if a user opens a crafted .hdr via the sequencer. Publicly documented remediation in connected sourc...

8.8CVSS7.7AI score0.01841EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2018/04/24 7:00 p.m.46 views

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS8.6AI score0.01841EPSS
SaveExploits1
Talos
Talos
added 2018/01/11 12:00 a.m.38 views

Blender Sequencer imb_loadhdr Integer Overflow Code Execution Vulnerability

Summary An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .hdr file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

8.8CVSS7.9AI score0.01841EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:00 a.m.32 views

Ubuntu 6.06 LTS : blender vulnerabilities (USN-699-1)

It was discovered that Blender did not correctly handle certain malformed Radiance RGBE images. If a user were tricked into opening a .blend file containing a specially crafted Radiance RGBE image, an attacker could execute arbitrary code with the user's privileges. CVE-2008-1102 It was discovere...

6.9CVSS6AI score0.03885EPSS
SaveExploits1References3
Gentoo Linux
Gentoo Linux
added 2009/03/06 12:00 a.m.22 views

DevIL: User-assisted execution of arbitrary code

Background Developer's Image Library DevIL is a cross-platform image library. Description Stefan Cornelius Secunia Research discovered two boundary errors within the iGetHdrHeader function in src-IL/src/ilhdr.c. Impact A remote attacker could entice a user to open a specially crafted Radiance RGB...

7.5CVSS6.7AI score0.03153EPSS
SaveExploits1
NVD
NVD
added 2009/02/26 4:17 p.m.25 views

CVE-2008-5263

Multiple stack-based buffer overflows in the mtcodec::getHdrHead function in kernel/klshdr/fmtcodechdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image aka .hdr file...

6.8CVSS7.4AI score0.0227EPSS
SaveExploits1References6
Prion
Prion
added 2009/02/26 4:17 p.m.15 views

Stack overflow

Multiple stack-based buffer overflows in the mtcodec::getHdrHead function in kernel/klshdr/fmtcodechdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image aka .hdr file...

6.8CVSS8AI score0.0227EPSS
SaveExploits1References6Affected Software1
UbuntuCve
UbuntuCve
added 2009/02/26 4:17 p.m.32 views

CVE-2008-5263

Multiple stack-based buffer overflows in the mtcodec::getHdrHead function in kernel/klshdr/fmtcodechdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image aka .hdr file...

6.8CVSS6.5AI score0.0227EPSS
SaveExploits1References1
Rows per page
Query Builder