VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 24, 2018· Updated Jun 17, 2026

CVE-2017-2906

CVE-2017-2906

Description

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Blender/Blender2 versions
    cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*
    • (no CPE)range: v2.78c
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.