Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Blender创建不安全临时文件漏洞
Vulnerability Description
Blender是Blender基金会所维护的一套免费的三维绘图及渲染软件。该软件支持多种几何图形、多种内部渲染和动画工具等。 Blender在终止的时候创建了/tmp/quit.blend文件，而该文件使用了容易猜测的文件名并使用不安全的文件权限存储临时渲染帧，在自动保存文件时也使用了不安全的文件权限。本地攻击者可以通过符号链接攻击以运行Blender用户的权限覆盖任意文件，或泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A