blender
Page content
- Author: Miklos Vajna
- Vulnerable: 2.48a-1
- Unaffected: 2.48a-2anacreon1
A vulnerability has been reported in Blender, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to Blender using the current working directory as part of the module search path, which can be exploited to e.g. execute arbitrary Python code with the privileges of another user by tricking the user into executing Blender in a directory containing a Python file named like one of the modules Blender uses.
- Bug Tracker URL: http://bugs.frugalware.org/task/3726