CVE-2010-5105: Low severity Blender blender vulnerability
Published Apr 27, 2014
·Updated
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
Affected Software
1 affected component
Blender blender<=2.63a
Event History
Apr 27, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-5105?
CVE-2010-5105 has a moderate severity level, as it allows local users to overwrite arbitrary files.
2
How do I fix CVE-2010-5105?
To fix CVE-2010-5105, update Blender to a version later than 2.63a.
3
What software versions are affected by CVE-2010-5105?
CVE-2010-5105 affects Blender versions 2.5 and 2.63a and earlier.
4
What type of attack does CVE-2010-5105 involve?
CVE-2010-5105 involves a symlink attack that exploits the undo save quit routine in Blender.
5
Is CVE-2010-5105 related to other vulnerabilities?
Yes, CVE-2010-5105 might be a regression of CVE-2008-1103.