Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."

The remote host is affected by the vulnerability described in GLSA-201311-07 (Blender: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Blender. Please review       the CVE identifier referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Fix insecure use of creating temporary file.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix insecure creation of temporary file.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix security flaw on insecure file creation.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix insucury file usage reported as CVE-2008-1103

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were opened(CVE-2008-1102).

As well, multiple vulnerabilities involving insecure usage of temporary files had also been reported (CVE-2008-1103).

The updated packages have been patched to prevent these issues.

The remote host is affected by the vulnerability described in GLSA-200805-12 (Blender: Multiple vulnerabilities)

    Stefan Cornelius (Secunia Research) reported a boundary error within     the imb_loadhdr() function in in the file     source/blender/imbuf/intern/radiance_hdr.c when processing RGBE images     (CVE-2008-1102). Multiple vulnerabilities involving insecure usage of     temporary files have also been reported (CVE-2008-1103).
  Impact :

    A remote attacker could entice a user to open a specially crafted file     (.hdr or .blend), possibly resulting in the remote execution of     arbitrary code with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
70867	GLSA-201311-07 : Blender: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
62165	Fedora 16 : blender-2.59-7.fc16 (2012-13665)	Nessus	Fedora Local Security Checks	medium
62164	Fedora 17 : blender-2.63a-4.fc17 (2012-13639)	Nessus	Fedora Local Security Checks	medium
62161	Fedora 18 : blender-2.63a-9.fc18 (2012-13557)	Nessus	Fedora Local Security Checks	medium
62158	Fedora 18 : blender-2.63a-8.fc18 (2012-13523)	Nessus	Fedora Local Security Checks	medium
36425	Mandriva Linux Security Advisory : blender (MDVSA-2008:204)	Nessus	Mandriva Local Security Checks	medium
32303	GLSA-200805-12 : Blender: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2008-1103

critical

Tenable Plugins

high

medium

medium

medium

medium

medium

medium