CVE-2005-3302

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.

Score

CVSS 3.1 7.3 High

Status

Modified - cve@mitre.org

Published

2005-10-24

Last modified

2025-01-16

Weaknesses

CWE-94

Affected products

• Blender (Blender)
• Debian Linux (Debian)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330895
• http://secunia.com/advisories/19754
• http://www.debian.org/security/2006/dsa-1039
• http://www.securityfocus.com/bid/17663