CVE-2008-1102

Publication date 22 April 2008

Last updated 24 July 2024


Ubuntu priority

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Status

Package Ubuntu Release Status
blender 8.10 intrepid
Not affected
8.04 LTS hardy
Fixed 2.45-4ubuntu1.1
7.10 gutsy
Fixed 2.44-2ubuntu2.1
7.04 feisty Ignored end of life, was needed
6.06 LTS dapper
Fixed 2.41-1ubuntu4.1

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
blender

References

Related Ubuntu Security Notices (USN)

    • USN-699-1
    • Blender vulnerabilities
    • 22 December 2008

Other references