Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Blender 'sys.path' 远程命令执行漏洞
Vulnerability Description
Blender是Blender基金会所维护的一套免费的三维绘图及渲染软件。该软件支持多种几何图形、多种内部渲染和动画工具等。 Blender的BPY_interface调用PySys_SetArgv的方式允许Python向sys.path前附加空字符串。如果Blender的工作目录中包含的python文件与Blender的python脚本试图导入文件拥有相同文件名的话，这可能允许在用户系统中执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A