CVE-2005-4470 - CVE House
Back to Database
Status published High CVE-2005-4470

Heap-based buffer overflow in the get_bhead function in readfile.c in...

Vulnerability Description

Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4470

Credits & Attribution

No credits recorded in the NVD database.

References

More from blender

View All →
CVE-2010-5105
The undo save quit routine in the kernel in Blender...
Low 3.3
CVE-2009-3850
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to...
Critical 9.3
CVE-2008-4863
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows...
Medium 6.9
CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack...
Medium 6.9
CVE-2008-1102
Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45...
Medium 6.8

Affected Vendor

Affected Software

blenloader
Vulnerable Versions:
0, 2.0, 2.04, 2.25, 2.26, 2.27, 2.28, 2.28a, 2.28c, 2.30, 2.31a, 2.32, 2.33, 2.33a, 2.34, 2.35, 2.37, 2.37a, 2.39, 2.40_alpha

Timeline

Official Publish: December 22nd, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.