CVEvulnerability

CVE-2005-3302

7.3 HIGH Published 2005-10-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-10-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-94

Description

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.

Affected configurations

• blender blender 2.36 • debian debian linux 3.1

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (2)

CWE-94 Improper Control of Generation of Code weakness
CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code weakness

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895 Exploit, Mailing List, Third Party Advisory
http://secunia.com/advisories/19754 Broken Link
http://www.debian.org/security/2006/dsa-1039 Third Party Advisory
http://www.securityfocus.com/bid/17663 Broken Link, Third Party Advisory, VDB Entry
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895 Exploit, Mailing List, Third Party Advisory
http://secunia.com/advisories/19754 Broken Link
http://www.debian.org/security/2006/dsa-1039 Third Party Advisory
http://www.securityfocus.com/bid/17663 Broken Link, Third Party Advisory, VDB Entry