CVE-2017-2903

Name of the Vulnerable Software and Affected Versions Blender version 2.78c

Description An integer overflow exists in the DPX loading functionality, which can be exploited using a specially crafted '.cin' file. This can cause a buffer overflow, allowing for code execution under the context of the application. An attacker can trigger this issue by convincing a user to use the malicious file as an asset via the sequencer.

Recommendations For Blender version 2.78c, consider avoiding the use of '.cin' files from untrusted sources until a patch is available. As a temporary workaround, restrict the use of the DPX loading functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.