CVE-2010-5105
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to...
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
Exploit likelihood
What each source reports
NVD Score used
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
CVE-2010-5105- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
CVE-2010-5105- Updated
- 2026-11-02
EUVDEUVD-2010-5065 No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
EUVD-2010-5065- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6645-m42r-vrq8 No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to...
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
GHSA-6645-m42r-vrq8- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
CVE-2010-5105- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-5105 No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
DEBIAN-CVE-2010-5105- Updated
- 2026-11-02
OSVUBUNTU-CVE-2010-5105 No score
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- Record
UBUNTU-CVE-2010-5105- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
blenderDebian:12 |
All versions, plus listed versions 3.4.1+dfsg-23.6.2+dfsg-13.6.2+dfsg-24.0.2+dfsg-14.1.1+dfsg-1 Show 20 moreShow less4.1.1+dfsg-24.1.1+dfsg-34.2.1+dfsg-14.2.2+dfsg-14.2.3+dfsg-14.2.3+dfsg-24.2.3+dfsg-34.3.0+dfsg-14.3.2+dfsg-14.3.2+dfsg-25.0.1+dfsg-15.0.1+dfsg-25.0.1+dfsg-35.0.1+dfsg-45.0.1+dfsg-55.0.1+dfsg-65.0.1+dfsg-75.0.1+dfsg-85.0.1+dfsg-95.2.2+dfsg-1 |
None known |
blenderDebian:13 |
All versions, plus listed versions 4.3.2+dfsg-25.0.1+dfsg-15.0.1+dfsg-25.0.1+dfsg-35.0.1+dfsg-4 Show 6 moreShow less5.0.1+dfsg-55.0.1+dfsg-65.0.1+dfsg-75.0.1+dfsg-85.0.1+dfsg-95.2.2+dfsg-1 |
None known |
blenderUbuntu:16.04:LTS |
All versions, plus listed versions 2.74+dfsg0-4build22.75.a+dfsg0-2ubuntu22.75.a+dfsg0-2ubuntu32.76.b+dfsg0-32.76.b+dfsg0-3build1 |
None known |
blenderUbuntu:18.04:LTS |
All versions, plus listed versions 2.78.c+dfsg0-2build12.79+dfsg0-2build12.79+dfsg0-32.79+dfsg0-3build12.79.b+dfsg0-12.79.b+dfsg0-1ubuntu1.18.04.1 |
None known |
blenderUbuntu:20.04:LTS |
All versions, plus listed versions 2.80+dfsg-32.80+dfsg-3build12.80+dfsg-42.81.a+dfsg-5build32.82+dfsg-12.82+dfsg-1build12.82.a+dfsg-1 |
None known |
blenderUbuntu:22.04:LTS |
All versions, plus listed versions 2.93.3+dfsg-32.93.5+dfsg-12.93.5+dfsg-1build13.0.1+dfsg-7 |
None known |
blenderUbuntu:24.04:LTS |
All versions, plus listed versions 3.6.2+dfsg-2ubuntu13.6.2+dfsg-2ubuntu24.0.2+dfsg-1ubuntu14.0.2+dfsg-1ubuntu24.0.2+dfsg-1ubuntu44.0.2+dfsg-1ubuntu64.0.2+dfsg-1ubuntu74.0.2+dfsg-1ubuntu8 |
None known |
blenderUbuntu:25.10 |
All versions, plus listed versions 4.3.2+dfsg-24.3.2+dfsg-2ubuntu14.3.2+dfsg-2ubuntu2 |
None known |
blenderUbuntu:26.10 |
All versions, plus listed versions 5.0.1+dfsg-1ubuntu15.0.1+dfsg-1ubuntu35.0.1+dfsg-3build15.0.1+dfsg-5 |
None known |
blenderUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.2+dfsg-2ubuntu25.0.1+dfsg-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-5105 is a low vulnerability (CVSS 3.3) in Blender, published April 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.