PT-2017-12786 · Unity · Unity Editor

Publicado 2017-08-18 · Atualizado 2017-09-13 · CVE-2017-12939

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unity Editor versions prior to 5.3.8p2 Unity Editor versions 5.4.x prior to 5.4.5p5 Unity Editor versions 5.5.x prior to 5.5.4p3 Unity Editor versions 5.6.x prior to 5.6.3p1 Unity Editor versions 2017.x prior to 2017.1.0p4

Description A Remote Code Execution issue was identified in Windows versions of Unity Editor.

Recommendations For Unity Editor versions prior to 5.3.8p2, update to version 5.3.8p2 or later. For Unity Editor versions 5.4.x prior to 5.4.5p5, update to version 5.4.5p5 or later. For Unity Editor versions 5.5.x prior to 5.5.4p3, update to version 5.5.4p3 or later. For Unity Editor versions 5.6.x prior to 5.6.3p1, update to version 5.6.3p1 or later. For Unity Editor versions 2017.x prior to 2017.1.0p4, update to version 2017.1.0p4 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-12939

Produtos afetados

Unity Editor

Referências · 5

• https://unity3d.com/security#issues · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-12939 · Aviso do Fabricante
• https://twitter.com/0x09AL/status/898635999185711108 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12939 · Nota de Segurança
• http://securityfocus.com/bid/100444 · Nota