p PatchFirst

CVE-2005-3302

CVE-2005-3302

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.

CVSS 7.3 · High · EPSS 3.9% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • blender Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.37a-1

    Update to 2.37a-1

  • blender Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.37a-1

    Update to 2.37a-1

Original sources

Check your server →