Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

The remote host is affected by the vulnerability described in GLSA-201311-07 (Blender: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Blender. Please review       the CVE identifier referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

It was discovered that Blender did not correctly handle certain malformed Radiance RGBE images. If a user were tricked into opening a .blend file containing a specially crafted Radiance RGBE image, an attacker could execute arbitrary code with the user's privileges.
(CVE-2008-1102)

It was discovered that Blender did not properly sanitize the Python search path. A local attacker could execute arbitrary code by inserting a specially crafted Python file in the Blender working directory. (CVE-2008-4863).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were opened(CVE-2008-1102).

As well, multiple vulnerabilities involving insecure usage of temporary files had also been reported (CVE-2008-1103).

The updated packages have been patched to prevent these issues.

Fix security issue CVE-2008-1102 / #443934 / SA29818: Blender Radiance RGBE Buffer Overflow

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200805-12 (Blender: Multiple vulnerabilities)

    Stefan Cornelius (Secunia Research) reported a boundary error within     the imb_loadhdr() function in in the file     source/blender/imbuf/intern/radiance_hdr.c when processing RGBE images     (CVE-2008-1102). Multiple vulnerabilities involving insecure usage of     temporary files have also been reported (CVE-2008-1103).
  Impact :

    A remote attacker could entice a user to open a specially crafted file     (.hdr or .blend), possibly resulting in the remote execution of     arbitrary code with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

Stefan Cornelius discovered a vulnerability in the Radiance High Dynamic Range (HDR) image parser in Blender, a 3D modelling application. The weakness could enable a stack-based buffer overflow and the execution of arbitrary code if a maliciously-crafted HDR file is opened, or if a directory containing such a file is browsed via Blender's image-open dialog.

ID	Name	Product	Family	Type	Severity
70867	GLSA-201311-07 : Blender: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
37828	Ubuntu 6.06 LTS : blender vulnerabilities (USN-699-1)	Nessus	Ubuntu Local Security Checks	Local	medium
36425	Mandriva Linux Security Advisory : blender (MDVSA-2008:204)	Nessus	Mandriva Local Security Checks	Local	medium
32337	Fedora 8 : blender-2.45-14.fc8 (2008-3875)	Nessus	Fedora Local Security Checks	Local	medium
32334	Fedora 7 : blender-2.45-14.fc7 (2008-3862)	Nessus	Fedora Local Security Checks	Local	medium
32303	GLSA-200805-12 : Blender: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
32141	Debian DSA-1567-1 : blender - buffer overrun	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-1102

critical

Tenable Plugins

high

medium

medium

medium

medium

medium

medium