PT-2018-3114 · Blender+1 · Blender+1
Published
2018-04-24
·
Updated
2023-02-02
·
CVE-2017-12105
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Blender version 2.78c
Description
An integer overflow exists in the way Blender applies a particular object modifier to a Mesh, which can be exploited by a specially crafted .blend file. This can cause a buffer overflow, allowing for code execution under the context of the application. An attacker can trigger this issue by convincing a user to open the malicious file or use it as a library.
Recommendations
For Blender version 2.78c, consider avoiding the use of specially crafted .blend files until a patch is available. As a temporary workaround, restrict the use of the Mesh object modifier to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Blender