Integer Overflow Vulnerability in Blender 3D Creation Suite by Blender Foundation

CVE-2017-2906

What is CVE-2017-2906?

An integer overflow vulnerability exists in the animation functionality of Blender, affecting version 2.78c. When a specially crafted '.avi' file is processed, it can trigger an overflow that results in a buffer overflow, potentially leading to arbitrary code execution within the application context. This vulnerability can be exploited if an attacker convinces a user to incorporate the malicious file into their assets, ultimately compromising the software's integrity and security.

References