[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2017-2904 -- blender

ID: oval:org.secpod.oval:def:1901578Date: (C)2019-06-07   (M)2023-12-20
Class: VULNERABILITYFamily: unix




An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted ".hdr" file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.

Platform:
Ubuntu 16.04
Ubuntu 14.04
Product:
blender
Reference:
CVE-2017-2904
CVE    1
CVE-2017-2904
CPE    3
cpe:/a:blender:blender
cpe:/o:ubuntu:ubuntu_linux:16.04
cpe:/o:ubuntu:ubuntu_linux:14.04

© SecPod Technologies