blender: user-assisted remote execution of arbitrary code
| Package(s): | blender | CVE #(s): | CVE-2007-1253 | ||||
| Created: | April 24, 2007 | Updated: | April 25, 2007 | ||||
| Description: | Stefan Cornelius of Secunia Research discovered an insecure use of the "eval()" function in kmz_ImportWithMesh.py. A remote attacker could entice a user to open a specially crafted Blender file (.kmz or .kml), resulting in the execution of arbitrary Python code with the privileges of the user running Blender. | ||||||
| Alerts: |
| ||||||
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.