Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-4470

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Published

2005-12-22T00:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application blender blenloader ≤ 2.40_pre Yes
Application blender blenloader 2.0 Yes
Application blender blenloader 2.04 Yes
Application blender blenloader 2.25 Yes
Application blender blenloader 2.26 Yes
Application blender blenloader 2.27 Yes
Application blender blenloader 2.28 Yes
Application blender blenloader 2.28a Yes
Application blender blenloader 2.28c Yes
Application blender blenloader 2.30 Yes
Application blender blenloader 2.31a Yes
Application blender blenloader 2.32 Yes
Application blender blenloader 2.33 Yes
Application blender blenloader 2.33a Yes
Application blender blenloader 2.34 Yes
Application blender blenloader 2.35 Yes
Application blender blenloader 2.37 Yes
Application blender blenloader 2.37a Yes
Application blender blenloader 2.39 Yes
Application blender blenloader 2.40_alpha Yes
References