p PatchFirst

CVE-2007-1253

CVE-2007-1253

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file.

EPSS 2.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • blender Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.42a-6

    Update to 2.42a-6

  • blender Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.42a-6

    Update to 2.42a-6

Original sources

Check your server →