Blender 2.78c
Approved changes feed: RSS · Atom
cpe:2.3:a:blender:blender:2.78c:*:*:*:*:*:*:*
part: a version: 2.78c update: *
| Vendor | Blender (142a225b-38c5-5c46-ad3d-7f1f667da538) |
|---|---|
| Product | Blender (3aa2bef7-cdc3-5628-9691-fb4c8b92126c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/sonictk/blender |
purl2cpe | 2026-06-01 10:15:24.780572 |
pkg:deb/debian/blender |
purl2cpe | 2026-06-01 10:15:24.780573 |
pkg:deb/ubuntu/blender |
purl2cpe | 2026-06-01 10:15:24.780574 |
pkg:github/blender/blender |
purl2cpe | 2026-06-01 10:15:24.780576 |
pkg:github/sobotka/blender |
purl2cpe | 2026-06-01 10:15:24.780577 |
pkg:rpm/fedora/blender |
purl2cpe | 2026-06-01 10:15:24.780579 |
pkg:rpm/opensuse/blender |
purl2cpe | 2026-06-01 10:15:24.780580 |
pkg:sourceforge/blender |
purl2cpe | 2026-06-01 10:15:24.780582 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2918 |
vulnerable | 2026-06-08 05:09:26.138727 |
Details available
HIGH (8.8)
An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open the file or use it as a library in order to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T02:47:27.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2908 |
vulnerable | 2026-06-08 05:09:26.130208 |
Details available
HIGH (7.5)
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to render the thumbnail for the file while in the File->Open dialog.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T20:36:50.959Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2907 |
vulnerable | 2026-06-08 05:09:26.129796 |
Details available
HIGH (8.8)
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T22:36:47.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2906 |
vulnerable | 2026-06-08 05:09:26.129296 |
Details available
HIGH (8.8)
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T03:23:35.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2905 |
vulnerable | 2026-06-08 05:09:26.128900 |
Details available
HIGH (8.8)
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T22:25:11.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2904 |
vulnerable | 2026-06-08 05:09:26.128493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2903 |
vulnerable | 2026-06-08 05:09:26.128075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2902 |
vulnerable | 2026-06-08 05:09:26.127676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2901 |
vulnerable | 2026-06-08 05:09:26.127255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2900 |
vulnerable | 2026-06-08 05:09:26.126807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2899 |
vulnerable | 2026-06-08 05:09:26.126262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12105 |
vulnerable | 2026-06-08 05:08:45.295083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12104 |
vulnerable | 2026-06-08 05:08:45.294677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12103 |
vulnerable | 2026-06-08 05:08:45.294254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12102 |
vulnerable | 2026-06-08 05:08:45.293820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12101 |
vulnerable | 2026-06-08 05:08:45.293397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12100 |
vulnerable | 2026-06-08 05:08:45.292943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12099 |
vulnerable | 2026-06-08 05:08:45.291421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12086 |
vulnerable | 2026-06-08 05:08:38.718681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12082 |
vulnerable | 2026-06-08 05:08:38.713970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12081 |
vulnerable | 2026-06-08 05:08:38.713318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.