Lucene search
HistoryNov 01, 2008 - 12:00 a.m.
CVE-2008-4863
blender
bpy_interface
cve-2008-4863
vulnerability
python
local users
execute arbitrary code
nvd
6.7 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
39.2%
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| blender:blender | blender | eq | 2.46 |
Related
nessus
nessus
Fedora 8 : blender-2.48a-4.fc8 (2008-9411)
2008-11-12 00:00:00
Fedora 10 : blender-2.48a-4.fc10 (2008-10448)
2009-04-23 00:00:00
Mandriva Linux Security Advisory : blender (MDVSA-2009:038-1)
2009-04-23 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:038 (blender)
2009-02-18 00:00:00
Mandriva Security Advisory MDVSA-2009:038-1 (blender)
2009-12-14 00:00:00
Mandrake Security Advisory MDVSA-2009:038 (blender)
2009-02-18 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: blender-2.48a-4.fc10
2008-12-03 01:30:39
[SECURITY] Fedora 9 Update: blender-2.48a-4.fc9
2008-11-12 02:54:31
[SECURITY] Fedora 8 Update: blender-2.48a-4.fc8
2008-11-12 03:01:30
securityvulns
securityvulns
[ MDVSA-2009:038 ] blender
2009-02-17 00:00:00
blender / gedit / gnumeric / vim / eog python scripts code execution
2009-04-07 00:00:00
ubuntucve
ubuntucve
CVE-2008-4863
2008-11-01 00:00:00
prion
prion
Design/Logic Flaw
2008-11-01 00:00:00
debiancve
debiancve
CVE-2008-4863
2008-11-01 00:00:00
gentoo
gentoo
Blender: Untrusted search path
2010-01-13 00:00:00
ubuntu
ubuntu
Blender vulnerabilities
2008-12-22 00:00:00
6.7 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
39.2%
Related for CVE-2008-4863