CVE-2008-4863: Medium severity Blender Blender vulnerability
Untrusted search path vulnerability in BPYinterface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySysSetArgv function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 2.46+dfsg-5 - Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.4.1+dfsg-2Fixed in 4.3.2+dfsg-2Fixed in 5.2.2+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4863?
CVE-2008-4863 is classified as a high severity vulnerability due to its ability to allow local users to execute arbitrary code.
How do I fix CVE-2008-4863?
To fix CVE-2008-4863, users should upgrade to a newer version of Blender that does not have the vulnerability.
Who is affected by CVE-2008-4863?
CVE-2008-4863 specifically affects users of Blender 2.46 and may expose them to arbitrary code execution risks.
What type of vulnerability is CVE-2008-4863?
CVE-2008-4863 is an untrusted search path vulnerability related to improper handling of Python file imports.
Can CVE-2008-4863 be exploited remotely?
CVE-2008-4863 cannot be exploited remotely; it requires local access to the affected system.