pkg:Debian/blender

所有已知漏洞

• HIGH7.8CVE-2022-0546A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause…
  from 0, < 2.83.5+dfsg-5+deb11u1
• HIGH7.8CVE-2022-0545An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability…
  from 0, < 2.83.5+dfsg-5+deb11u1
• HIGH7.8CVE-2017-2918An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2908An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2907An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2906An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2905An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2904An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2903An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2902An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2901An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2900An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-2899An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12105An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifie…
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12104An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12103An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font in…
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12102An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12101An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite…
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12100An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12099An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.…
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12086An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12082An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite.
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12081blender - security update
  from 0, < 2.72.b+dfsg0-3+deb8u1
• HIGH7.8CVE-2017-12081blender - security update
  from 0, < 2.79.a+dfsg0-1
• HIGH7.8CVE-2017-12081blender - security update
  from 0, < 2.79.b+dfsg0-1~deb9u1
• HIGH7.5CVE-2022-2833Endless Infinite loop in Blender-thumnailing due to logical bugs.
  from 0
• HIGH7.5CVE-2022-2832A flaw was found in Blender 3.3.0.
  from 0
• HIGH7.5CVE-2022-2831A flaw was found in Blender 3.3.0.
  from 0
• HIGH7.3CVE-2005-3302blender - several
  from 0, < 2.36-1sarge1
• HIGH7.3CVE-2005-3302blender - several
  from 0, < 2.37a-1
• MEDIUM5.5CVE-2022-0544blender - security update
  from 0, < 2.79.b+dfsg0-1~deb9u2
• MEDIUM5.5CVE-2022-0544blender - security update
  from 0, < 2.83.5+dfsg-5+deb11u1
• MEDIUM5.5CVE-2022-0544blender - security update
  from 0, < 2.79.b+dfsg0-7+deb10u1
• —CVE-2010-5105The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink a…
  from 0
• —CVE-2009-3850Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in…
  from 0
• —CVE-2008-4863Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python…
  from 0, < 2.46+dfsg-5
• —CVE-2008-1103Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."
  from 0, < 2.40-1
• —CVE-2008-1102blender - arbitrary code execution
  from 0, < 2.45-5
• —CVE-2008-1102blender - arbitrary code execution
  from 0, < 2.42a-7.1+etch1
• —CVE-2007-1253Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-as…
  from 0, < 2.42a-6
• —CVE-2005-4470blender - heap-based buffer overflow
  from 0, < 2.40-1
• —CVE-2005-4470blender - heap-based buffer overflow
  from 0, < 2.37a-1.1etch1
• —CVE-2005-3151Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.
  from 0