Lucene search

K
cveFlexeraCVE-2008-1102
HistoryApr 22, 2008 - 4:41 a.m.

CVE-2008-1102

2008-04-2204:41:00
CWE-119
flexera
web.nvd.nist.gov
25
blender
2.45
stack-based buffer overflow
cve-2008-1102
imb_loadhdr
remote code execution
radiance rgbe image

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.291

Percentile

96.9%

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Affected configurations

Nvd
Node
blenderblenderMatch2.45
VendorProductVersionCPE
blenderblender2.45cpe:2.3:a:blender:blender:2.45:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.291

Percentile

96.9%