7.5

CVE-2005-4470

Exploit

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Data is provided by the National Vulnerability Database (NVD)
Blender ≫ Blenloader Version <= 2.40_pre
Blender ≫ Blenloader Version2.0
Blender ≫ Blenloader Version2.04
Blender ≫ Blenloader Version2.25
Blender ≫ Blenloader Version2.26
Blender ≫ Blenloader Version2.27
Blender ≫ Blenloader Version2.28
Blender ≫ Blenloader Version2.28a
Blender ≫ Blenloader Version2.28c
Blender ≫ Blenloader Version2.30
Blender ≫ Blenloader Version2.31a
Blender ≫ Blenloader Version2.32
Blender ≫ Blenloader Version2.33
Blender ≫ Blenloader Version2.33a
Blender ≫ Blenloader Version2.34
Blender ≫ Blenloader Version2.35
Blender ≫ Blenloader Version2.37
Blender ≫ Blenloader Version2.37a
Blender ≫ Blenloader Version2.39
Blender ≫ Blenloader Version2.40_alpha
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.97% 0.897
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P