Blender BlenLoader File Processing Integer Overflow Vulnerability
BID:15981
Info
Blender BlenLoader File Processing Integer Overflow Vulnerability
| Bugtraq ID: | 15981 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2005 12:00AM |
| Updated: | Dec 14 2006 04:38PM |
| Credit: | Damian Put <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Blender Blender 2.40 alpha Blender Blender 2.39 Blender Blender 2.37 a Blender Blender 2.37 Blender Blender 2.35 Blender Blender 2.34 Blender Blender 2.33 a Blender Blender 2.33 Blender Blender 2.32 Blender Blender 2.31 a Blender Blender 2.30 Blender Blender 2.28 c Blender Blender 2.28 a Blender Blender 2.28 Blender Blender 2.27 Blender Blender 2.26 Blender Blender 2.25 Blender Blender 2.0 4 |
| Not Vulnerable: | |
Discussion
Blender BlenLoader File Processing Integer Overflow Vulnerability
Blender is susceptible to an integer-overflow vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a memory allocation and copy operation.
This issue allows attackers to execute arbitrary machine code in the context of the user running the affected application.
Blender is susceptible to an integer-overflow vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a memory allocation and copy operation.
This issue allows attackers to execute arbitrary machine code in the context of the user running the affected application.
Exploit / POC
Blender BlenLoader File Processing Integer Overflow Vulnerability
A command to create a file that is sufficient to demonstrate this issue was provided:
perl -e 'print "BLENDER_v273"; print "\xf0\xff\xff\xff"x10' > vuln.blend
--
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
A command to create a file that is sufficient to demonstrate this issue was provided:
perl -e 'print "BLENDER_v273"; print "\xf0\xff\xff\xff"x10' > vuln.blend
--
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Blender BlenLoader File Processing Integer Overflow Vulnerability
Solution:
Please see the referenced advisories for further information on obtaining and applying fixes.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Blender Blender 2.37 a
Solution:
Please see the referenced advisories for further information on obtaining and applying fixes.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Blender Blender 2.37 a
-
Ubuntu blender_2.37a-1ubuntu1.1_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/b/blender/blender_2.37a-1u buntu1.1_amd64.deb -
Ubuntu blender_2.37a-1ubuntu1.1_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/b/blender/blender_2.37a-1u buntu1.1_i386.deb -
Ubuntu blender_2.37a-1ubuntu1.1_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/b/blender/blender_2.37a-1u buntu1.1_powerpc.deb
References
Blender BlenLoader File Processing Integer Overflow Vulnerability
References:
References:
- Blender Homepage (Blender)
- [Overflow.pl] Blender BlenLoader Integer Overflow (Damian Put
)