This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Blender First view 2005-12-21
Product Blenloader Last view 2005-12-21
Version Type Application
Update  
Edition  
Language  
Sofware Edition  
Target Software  
Target Hardware  
Other  

Activity : Overall

COMMON PLATFORM ENUMERATION: Repartition per Version

CPE Name Affected CVE
cpe:2.3:a:blender:blenloader:2.0:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.37a:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.37:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.30:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.28c:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.40_alpha:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.39:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.32:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.31a:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.04:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.27:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.33a:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.33:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.26:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.25:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.35:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.34:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.28a:*:*:*:*:*:*:* 1
cpe:2.3:a:blender:blenloader:2.28:*:*:*:*:*:*:* 1

Related : CVE

  Date Alert Description
7.5 2005-12-21 CVE-2005-4470

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Open Source Vulnerability Database (OSVDB)

id Description
22011 Blender BlenLoader get_bhead() Function Overflow

OpenVAS Exploits

id Description
2008-09-24 Name : Gentoo Security Advisory GLSA 200601-08 (blender)
File : nvt/glsa_200601_08.nasl
2008-01-17 Name : Debian Security Advisory DSA 1039-1 (blender)
File : nvt/deb_1039_1.nasl

Nessus® Vulnerability Scanner

id Description
2006-10-14 Name: The remote Debian host is missing a security-related update.
File: debian_DSA-1039.nasl - Type: ACT_GATHER_INFO
2006-01-21 Name: The remote Ubuntu host is missing a security-related patch.
File: ubuntu_USN-238-2.nasl - Type: ACT_GATHER_INFO
2006-01-15 Name: The remote Gentoo host is missing one or more security-related patches.
File: gentoo_GLSA-200601-08.nasl - Type: ACT_GATHER_INFO