NVD

Id
16340  
Name
CVE-2010-5105  
Description
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-27  
Modified Date
2015-11-05  
Seq
2010-5105  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
91904 16340 CVE-2010-5105 openSUSE-SU-2013:0302  View
91905 16340 CVE-2010-5105 [oss-security] 20120906 CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103)  View
91906 16340 CVE-2010-5105 [oss-security] 20120907 Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103)  View
91907 16340 CVE-2010-5105 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621  View
91908 16340 CVE-2010-5105 https://developer.blender.org/T22509  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39884 JVNDB-2010-005669 Blender の kernel の保存終了を元に戻すルーチンにおける任意のファイルを上書きされる脆弱性 Blender の kernel の保存終了を元に戻すルーチン (undo save quit routine) には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2010-5105 47685 CVE-2010-5105 16340 3.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005669.html 2010-06-05 2014-04-30 View