{"id":"CVE-2017-2899","aliases":["DEBIAN-CVE-2017-2899","DLA-1465-1","DSA-4248-1","EUVD-2017-12040","GHSA-96mq-p6qx-9h4c","MGASA-2018-0332","UBUNTU-CVE-2017-2899"],"status":"published","title":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open...","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.01782,"percentile":0.78399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2018-04-24T19:00:00Z","modified":"2026-11-08T17:00:05Z","fixes":[{"ecosystem":"Debian:12","package":"blender","fixed_in":["2.79.a+dfsg0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"blender","fixed_in":["2.79.a+dfsg0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"blender","fixed_in":["2.79.a+dfsg0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.a+dfsg0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.a+dfsg0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.a+dfsg0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.b+dfsg0-3+deb8u1"}]}],"versions":["2.72.b+dfsg0-3"],"bundled":21},{"source":"osv","ecosystem":"Debian:9","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.b+dfsg0-1~deb9u1"}]}],"versions":["2.78.a+dfsg0-4","2.78.c+dfsg0-1","2.78.c+dfsg0-2","2.79+dfsg0-1","2.79+dfsg0-2","2.79+dfsg0-3","2.79.a+dfsg0-1","2.79.a+dfsg0-2"],"bundled":21},{"source":"osv","ecosystem":"Mageia:6","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79b-1.1.mga6"}]}],"bundled":21},{"source":"osv","ecosystem":"Mageia:6","package":"yafaray","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1.2.mga6"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]}],"products":[{"vendor":"blender","product":"blender"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4248","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0406","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2899"},{"url":"https://github.com/advisories/GHSA-96mq-p6qx-9h4c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2899","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0332.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23332","tags":["report"]},{"url":"https://www.blender.org/features/2-79/","tags":["web"]},{"url":"http://www.yafaray.org/node/817","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-2899","tags":["report"]},{"url":"https://git.blender.org/gitweb/gitweb.cgi/blender.git/commit/d30cc1ea0b9ba64d8a1e22105528b6cb8077692c","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2899","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-2899","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-16T19:50:46.06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:15.201133Z"}],"euvd":[{"id":"EUVD-2017-12040","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:00:00Z","modified":"2024-09-16T19:50:46Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:19.533306Z"}],"ghsa":[{"id":"GHSA-96mq-p6qx-9h4c","title":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open...","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2022-05-13T01:01:15Z","modified":"2023-01-27T05:02:26Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:42:03.063922Z"}],"nvd":[{"id":"CVE-2017-2899","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:02.847Z","modified":"2026-06-17T01:17:05.617Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:17.638656Z"}],"osv":[{"id":"CVE-2017-2899","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:02.847Z","modified":"2026-10-24T10:30:30.462789387Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-2899","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:02.847Z","modified":"2026-11-08T17:00:05.52009597Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-08T17:07:41.883129Z"},{"id":"UBUNTU-CVE-2017-2899","description":"An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.","status":"published","published":"2018-04-24T19:29:00Z","modified":"2025-10-24T04:46:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1465-1","title":"blender - security update","status":"published","published":"2018-08-13T00:00:00Z","modified":"2026-03-09T01:01:10.339849Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4248-1","title":"blender - security update","status":"published","published":"2018-07-17T00:00:00Z","modified":"2026-03-09T02:08:30.069316Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0332","title":"Updated blender packages fix security vulnerabilities","description":"Updated blender package fixes security vulnerabilities:\n\nMultiple vulnerabilities have been discovered in various parsers of Blender.\nMalformed .blend model files and malformed multimedia files (AVI, BMP, HDR,\nCIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code\n(CVE-2017-2899, CVE-2017-2900, CVE-2017-2901, CVE-2017-2902, CVE-2017-2903,\n CVE-2017-2904, CVE-2017-2905, CVE-2017-2906, CVE-2017-2907, CVE-2017-2908,\n CVE-2017-2918, CVE-2017-12081, CVE-2017-12082, CVE-2017-12086, \n CVE-2017-12099, CVE-2017-12100, CVE-2017-12101, CVE-2017-12102,\n CVE-2017-12103, CVE-2017-12104, CVE-2017-12105).\n\nThese issues are fixed by updating to the latest upstream 2.79b release,\nwhich brings many improvements, bug fixes and new features. See the\nreferenced changelog for details.\n\nAlso, the yafaray package has been updated to the latest version, 3.3.0, to\nmake it work with the new Blender addons path.\n","status":"published","published":"2018-08-10T14:37:39Z","modified":"2026-04-16T06:24:22.572442168Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}