DSA-4248: -1 blender -- security update

Published Jul 17, 2018

Updated

blender - security update

Other sources

Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.

Affected Software

2 affected components

debian/blender

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade blender to a version that resolves this vulnerability.
Patch DSA-4248-1

Event History

Jul 17, 2018

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems are most exposed to this issue?

Systems running Blender that parse .blend model files or multimedia files supplied by untrusted sources are most exposed. The affected parsers include AVI, BMP, HDR, CIN, IRIS, PNG, and TIFF.

What would an attacker need to provide to trigger the vulnerability?

An attacker would need to provide a malformed .blend file or a malformed file in one of the affected multimedia formats for Blender to parse. Successful exploitation may result in arbitrary code execution.

DSA-4248: -1 blender -- security update

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are most exposed to this issue?

What would an attacker need to provide to trigger the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which systems are most exposed to this issue?

What would an attacker need to provide to trigger the vulnerability?