EDB-9843

functional

Blender 2.34/2.35a/2.4/2.49b - '.blend' Command Injection

view exploit source exploit_dbverifiedtype remoteauthor Core Securitypublished 2009-11-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-3850UShigh9.3Exploit
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan