CVE-2008-1102: Buffer Overflow
Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 2.45-5 - Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.4.1+dfsg-2Fixed in 4.3.2+dfsg-2Fixed in 5.2.2+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1102?
CVE-2008-1102 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-1102?
To fix CVE-2008-1102, upgrade to a newer version of Blender that is not affected, as version 2.45 is vulnerable.
What type of vulnerability is CVE-2008-1102?
CVE-2008-1102 is a stack-based buffer overflow vulnerability.
Who is affected by CVE-2008-1102?
CVE-2008-1102 affects users of Blender version 2.45 who open specially crafted .blend files.
Can CVE-2008-1102 be exploited remotely?
Yes, CVE-2008-1102 can be exploited remotely by attackers through malicious .blend files.