Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-4470
HistoryDec 22, 2005 - 12:03 a.m.

CVE-2005-4470

2005-12-2200:03:00
mitre
web.nvd.nist.gov
36
cve-2005-4470
buffer overflow
remote attack
denial of service
arbitrary code execution
blender
blenloader

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Affected configurations

Nvd
Node
blenderblenloaderRange≤2.40_pre
OR
blenderblenloaderMatch2.0
OR
blenderblenloaderMatch2.04
OR
blenderblenloaderMatch2.25
OR
blenderblenloaderMatch2.26
OR
blenderblenloaderMatch2.27
OR
blenderblenloaderMatch2.28
OR
blenderblenloaderMatch2.28a
OR
blenderblenloaderMatch2.28c
OR
blenderblenloaderMatch2.30
OR
blenderblenloaderMatch2.31a
OR
blenderblenloaderMatch2.32
OR
blenderblenloaderMatch2.33
OR
blenderblenloaderMatch2.33a
OR
blenderblenloaderMatch2.34
OR
blenderblenloaderMatch2.35
OR
blenderblenloaderMatch2.37
OR
blenderblenloaderMatch2.37a
OR
blenderblenloaderMatch2.39
OR
blenderblenloaderMatch2.40_alpha
VendorProductVersionCPE
blenderblenloader*cpe:2.3:a:blender:blenloader:*:*:*:*:*:*:*:*
blenderblenloader2.0cpe:2.3:a:blender:blenloader:2.0:*:*:*:*:*:*:*
blenderblenloader2.04cpe:2.3:a:blender:blenloader:2.04:*:*:*:*:*:*:*
blenderblenloader2.25cpe:2.3:a:blender:blenloader:2.25:*:*:*:*:*:*:*
blenderblenloader2.26cpe:2.3:a:blender:blenloader:2.26:*:*:*:*:*:*:*
blenderblenloader2.27cpe:2.3:a:blender:blenloader:2.27:*:*:*:*:*:*:*
blenderblenloader2.28cpe:2.3:a:blender:blenloader:2.28:*:*:*:*:*:*:*
blenderblenloader2.28acpe:2.3:a:blender:blenloader:2.28a:*:*:*:*:*:*:*
blenderblenloader2.28ccpe:2.3:a:blender:blenloader:2.28c:*:*:*:*:*:*:*
blenderblenloader2.30cpe:2.3:a:blender:blenloader:2.30:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

Related

nessus 3
nvd 1
cvelist 1
debiancve 1
gentoo 1
openvas 5
ubuntucve 1
ubuntu 1
debian 2
osv 1
nessus
nessus
GLSA-200601-08 : Blender: Heap-based buffer overflow
2006-01-15 00:00:00
Ubuntu 5.10 : blender vulnerability (USN-238-2)
2006-01-21 00:00:00
Debian DSA-1039-1 : blender - several vulnerabilities
2006-10-14 00:00:00
nvd
nvd
CVE-2005-4470
2005-12-22 00:03:00
cvelist
cvelist
CVE-2005-4470
2005-12-22 00:00:00
debiancve
debiancve
CVE-2005-4470
2005-12-22 00:03:00
gentoo
gentoo
Blender: Heap-based buffer overflow
2006-01-13 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200601-08 (blender)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-238-2)
2022-08-26 00:00:00
Gentoo Security Advisory GLSA 200601-08 (blender)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2005-4470
2005-12-22 00:00:00
ubuntu
ubuntu
Blender vulnerability
2006-01-06 00:00:00
debian
debian
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities
2006-04-24 06:29:55
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities
2006-04-24 06:29:55
osv
osv
blender - several
2006-04-24 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON
Related for CVE-2005-4470
nessus3nvd1cvelist1debiancve1gentoo1openvas5ubuntucve1ubuntu1debian2osv1