{"id":"CVE-2017-12100","aliases":["DEBIAN-CVE-2017-12100","DLA-1465-1","DSA-4248-1","EUVD-2017-3684","GHSA-25ph-29m7-x9xv","MGASA-2018-0332","UBUNTU-CVE-2017-12100"],"status":"published","title":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender...","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.01802,"percentile":0.78639,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2018-04-24T19:00:00Z","modified":"2026-10-26T16:00:53Z","fixes":[{"ecosystem":"Debian:12","package":"blender","fixed_in":["2.79.a+dfsg0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"blender","fixed_in":["2.79.a+dfsg0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.a+dfsg0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.a+dfsg0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.b+dfsg0-3+deb8u1"}]}],"versions":["2.72.b+dfsg0-3"],"bundled":21},{"source":"osv","ecosystem":"Debian:9","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.b+dfsg0-1~deb9u1"}]}],"versions":["2.78.a+dfsg0-4","2.78.c+dfsg0-1","2.78.c+dfsg0-2","2.79+dfsg0-1","2.79+dfsg0-2","2.79+dfsg0-3","2.79.a+dfsg0-1","2.79.a+dfsg0-2"],"bundled":21},{"source":"osv","ecosystem":"Mageia:6","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79b-1.1.mga6"}]}],"bundled":21},{"source":"osv","ecosystem":"Mageia:6","package":"yafaray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1.2.mga6"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]}],"products":[{"vendor":"blender","product":"blender"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4248","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0452","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12100"},{"url":"https://github.com/advisories/GHSA-25ph-29m7-x9xv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12100","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0332.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23332","tags":["report"]},{"url":"https://www.blender.org/features/2-79/","tags":["web"]},{"url":"http://www.yafaray.org/node/817","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-12100","tags":["report"]},{"url":"https://git.blender.org/gitweb/gitweb.cgi/blender.git/commit/e04d7c49dca9dc7bbf1cbe446b612aaa5ba12581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12100","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-12100","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-16T19:47:06.894Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-3684","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-16T19:47:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:20.039201Z"}],"ghsa":[{"id":"GHSA-25ph-29m7-x9xv","title":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender...","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2022-05-13T01:01:39Z","modified":"2023-02-01T05:02:26Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:49:54.32219Z"}],"nvd":[{"id":"CVE-2017-12100","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:01.063Z","modified":"2026-06-17T01:02:41.013Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:17.032862Z"}],"osv":[{"id":"CVE-2017-12100","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:01.063Z","modified":"2026-10-24T10:30:42.82379453Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12100","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:01.063Z","modified":"2026-10-26T16:00:53.46581906Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-12100","description":"An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:00Z","modified":"2025-10-24T04:46:25Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1465-1","title":"blender - security update","status":"published","published":"2018-08-13T00:00:00Z","modified":"2026-03-09T01:01:10.339849Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4248-1","title":"blender - security update","status":"published","published":"2018-07-17T00:00:00Z","modified":"2026-03-09T02:08:30.069316Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0332","title":"Updated blender packages fix security vulnerabilities","description":"Updated blender package fixes security vulnerabilities:\n\nMultiple vulnerabilities have been discovered in various parsers of Blender.\nMalformed .blend model files and malformed multimedia files (AVI, BMP, HDR,\nCIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code\n(CVE-2017-2899, CVE-2017-2900, CVE-2017-2901, CVE-2017-2902, CVE-2017-2903,\n CVE-2017-2904, CVE-2017-2905, CVE-2017-2906, CVE-2017-2907, CVE-2017-2908,\n CVE-2017-2918, CVE-2017-12081, CVE-2017-12082, CVE-2017-12086, \n CVE-2017-12099, CVE-2017-12100, CVE-2017-12101, CVE-2017-12102,\n CVE-2017-12103, CVE-2017-12104, CVE-2017-12105).\n\nThese issues are fixed by updating to the latest upstream 2.79b release,\nwhich brings many improvements, bug fixes and new features. See the\nreferenced changelog for details.\n\nAlso, the yafaray package has been updated to the latest version, 3.3.0, to\nmake it work with the new Blender addons path.\n","status":"published","published":"2018-08-10T14:37:39Z","modified":"2026-04-16T06:24:22.572442168Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}