CVE-2008-4863: Medium severity blender vulnerability

Published Oct 31, 2008

Updated

Untrusted search path vulnerability in BPYinterface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySysSetArgv function.

Affected Software

1 affected component

Blender blender=2.46

Event History

Oct 31, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4863?

CVE-2008-4863 is classified as a high severity vulnerability due to its ability to allow local users to execute arbitrary code.

How do I fix CVE-2008-4863?

To fix CVE-2008-4863, users should upgrade to a newer version of Blender that does not have the vulnerability.

Who is affected by CVE-2008-4863?

CVE-2008-4863 specifically affects users of Blender 2.46 and may expose them to arbitrary code execution risks.

What type of vulnerability is CVE-2008-4863?

CVE-2008-4863 is an untrusted search path vulnerability related to improper handling of Python file imports.

Can CVE-2008-4863 be exploited remotely?

CVE-2008-4863 cannot be exploited remotely; it requires local access to the affected system.