Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-4470

Опубликовано: 22 дек. 2005
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:blender:blenloader:*:*:*:*:*:*:*:*
Версия до 2.40_pre (включая)
cpe:2.3:a:blender:blenloader:2.0:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.04:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.25:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.26:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.27:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.28:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.28a:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.28c:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.30:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.31a:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.32:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.33:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.33a:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.34:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.35:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.37:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.37a:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.39:*:*:*:*:*:*:*
cpe:2.3:a:blender:blenloader:2.40_alpha:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05971
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 19 лет назад

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

debian
больше 19 лет назад

Heap-based buffer overflow in the get_bhead function in readfile.c in ...

github
больше 3 лет назад

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

EPSS

Процентиль: 90%
0.05971
Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other