CVE-2005-3302: Code Injection
Published Oct 24, 2005
·Updated
Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.
Affected Software
2 affected components
Blender Blender=2.36
Debian Debian Linux=3.1
Event History
Oct 24, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3302?
CVE-2005-3302 has been classified as a critical vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2005-3302?
To fix CVE-2005-3302, upgrade Blender to a version beyond 2.36 where the eval injection vulnerability is patched.
3
Which versions of Blender are affected by CVE-2005-3302?
Blender version 2.36 is affected by CVE-2005-3302, which allows for eval injection vulnerabilities.
4
What kind of attacks can exploit CVE-2005-3302?
CVE-2005-3302 can be exploited by attackers to execute arbitrary Python code through a crafted .bvh file.
5
Is CVE-2005-3302 relevant to Debian users?
Yes, CVE-2005-3302 impacts Debian 3.1 users who may use the affected version of Blender.