Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Gentoo Linux Security Advisory GLSA 200704-19
https://security.gentoo.org/
Severity: Normal
Title: Blender: User-assisted remote execution of arbitrary code
Date: April 23, 2007
Bugs: #168907
ID: 200704-19
Synopsis
=======
A vulnerability has been discovered in Blender allowing for
user-assisted arbitrary code execution.
Background
=========
Blender is a 3D creation, animation and publishing program.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-gfx/blender < 2.43 >= 2.43
==========
Stefan Cornelius of Secunia Research discovered an insecure use of the
"eval()" function in kmz_ImportWithMesh.py.
Impact
=====
A remote attacker could entice a use...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.