CVE ID:	CVE-2009-3850
Description:	Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA.
Test IDs:	1.3.6.1.4.1.25623.1.0.900252   1.3.6.1.4.1.25623.1.0.863346   1.3.6.1.4.1.25623.1.0.69929   1.3.6.1.4.1.25623.1.0.69932   1.3.6.1.4.1.25623.1.0.863355
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3850 BugTraq ID: 36838 http://www.securityfocus.com/bid/36838 Bugtraq: 20091105 CORE-2009-0912: Blender .blend Project Arbitrary Command Execution (Google Search) http://www.securityfocus.com/archive/1/507706/100/0/threaded http://www.coresecurity.com/content/blender-scripting-injection