Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=31ced402f472b36980dd70dfb8385c526f1b3e5b
commit 31ced402f472b36980dd70dfb8385c526f1b3e5b Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Fri Jun 13 16:21:15 2008 +0200 FSA453-blender diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index b624c2e..84908a0 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,18 @@ <fsas> <fsa> + <id>454</id> + <date>2008-06-13</date> + <package>blender</package> + <vulnerable>2.45-1</vulnerable> + <unaffected>2.45-2kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/3039</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1102</cve> + <desc>Secunia Research has discovered a vulnerability in Blender, which can be exploited by malicious people to compromise a vulnerable system. + The vulnerability is caused due to a boundary error within the "imb_loadhdr()" function in source/blender/imbuf/intern/radiance_hdr.c, which can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into opening a specially crafted Blender (*.blend) file containing a malicious Radiance RGBE image. + Successful exploitation allows execution of arbitrary code.</desc> + </fsa> + <fsa> <id>453</id> <date>2008-06-13</date> <package>libvorbis</package> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
