ID CVE-2017-2901
Summary An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
References
Vulnerable Configurations
  • cpe:2.3:a:blender:blender:2.78c
    cpe:2.3:a:blender:blender:2.78c
  • Debian Linux 8.0 (Jessie)
    cpe:2.3:o:debian:debian_linux:8.0
  • Debian Linux 9.0
    cpe:2.3:o:debian:debian_linux:9.0
CVSS
Base: 6.8
Impact:
Exploitability:
CWE CWE-190
CAPEC
  • Forced Integer Overflow
    This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.
nessus via4
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-4248.NASL
    description Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 111140
    published 2018-07-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=111140
    title Debian DSA-4248-1 : blender - security update
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-1465.NASL
    description Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code. For Debian 8 'Jessie', these problems have been fixed in version 2.72.b+dfsg0-3+deb8u1. We recommend that you upgrade your blender packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-08-31
    plugin id 111705
    published 2018-08-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=111705
    title Debian DLA-1465-1 : blender security update
refmap via4
debian DSA-4248
misc https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0408
mlist [debian-lts-announce] 20180813 [SECURITY] [DLA 1465-1] blender security update
talos via4
id TALOS-2017-0408
last seen 2018-08-31
published 2018-01-11
reporter Talos Intelligence
source http://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0408
title Blender Sequencer imb_loadiris Integer Overflow Code Execution Vulnerability
Last major update 24-04-2018 - 15:29
Published 24-04-2018 - 15:29
Last modified 19-03-2019 - 09:31
Back to Top