CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 0CVE-2008-4863
https://notcve.org/view.php?id=CVE-2008-4863
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function. Vulnerabilidad de ruta de búsqueda no confiada en BPY_interface in Blender v2.46 permite a usuarios locales ejecutar código de su elección mediante un archivo Python caballo de troya en el directorio actual, relacionado con una configuración errónea de sys.path por la función PySys_SetArgv. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503632 http://security.gentoo.org/glsa/glsa-201001-07.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:038 http://www.openwall.com/lists/oss-security/2008/10/27/1 •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 0CVE-2008-1103
https://notcve.org/view.php?id=CVE-2008-1103
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues." Múltiples vulnerabilidades no especificadas en Blender tienen un impacto y vectores de ataque desconocidos, relacionado con "temas de ficheros temporales". • http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://secunia.com/advisories/29842 http://secunia.com/advisories/29957 http://secunia.com/advisories/30151 http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:204 http://www.securityfocus.com/bid/28936 https://exchange.xforce.ibmcloud.com/vulnerabilities/42153 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 6.8EPSS: 29%CPEs: 1EXPL: 0CVE-2008-1102
https://notcve.org/view.php?id=CVE-2008-1102
Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image. Desbordamiento de búfer basado en pila en la función imb_loadhdr de Blender 2.45 permite a atacantes remotos asistidos por el usuario ejecutar código de su elección a través de un fichero .blend que contiene imágenes Radiance RGBE manipuladas. • http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://secunia.com/advisories/29818 http://secunia.com/advisories/29957 http://secunia.com/advisories/30097 http://secunia.com/advisories/30151 http://secunia.com/advisories/30272 http://secunia.com/secunia_research/2008-16/advisory http://www.debian.org/security/2008/dsa-1567 http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:204 http: • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 1%CPEs: 4EXPL: 0CVE-2007-1253
https://notcve.org/view.php?id=CVE-2007-1253
Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file. Vulnerabilidad de inyección de evaluación en el (a) Script para Blender 0.1.9h kmz_ImportWithMesh.py tal y como se usa en (b) Blender versiones anteriores a 2.43, permite a usuarios remotos con la ayuda del usuario ejecutar código Pyton de su elección importando un fichero manipulado (1) KML ó (2) KMZ. • http://osvdb.org/33836 http://secunia.com/advisories/24232 http://secunia.com/advisories/24233 http://secunia.com/advisories/24991 http://secunia.com/secunia_research/2007-39/advisory http://secunia.com/secunia_research/2007-40/advisory http://security.gentoo.org/glsa/glsa-200704-19.xml http://www.securityfocus.com/bid/22770 http://www.securitytracker.com/id?1017714 http://www.vupen.com/english/advisories/2007/0798 https://exchange.xforce.ibmcloud.com/vulnerabilities/32778 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 2%CPEs: 20EXPL: 2CVE-2005-4470
https://notcve.org/view.php?id=CVE-2005-4470
Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow. • http://secunia.com/advisories/18176 http://secunia.com/advisories/18178 http://secunia.com/advisories/18452 http://secunia.com/advisories/19754 http://www.debian.org/security/2006/dsa-1039 http://www.gentoo.org/security/en/glsa/glsa-200601-08.xml http://www.overflow.pl/adv/blenderinteger.txt http://www.securityfocus.com/archive/1/419907/100/0/threaded http://www.securityfocus.com/bid/15981 http://www.vupen.com/english/advisories/2005/3032 https://usn.ubuntu.com •