PT-2019-7810 · Canonical · Unity8

Publicado 2019-04-22 · Atualizado 2020-07-14 · CVE-2016-1573

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unity8 versions prior to 8.11+16.04.20160122-0ubuntu1

Description The issue allows execution of arbitrary code when a fallback image supplied by a scope is used in place of a legitimate image. This is due to a flaw in the file plugins/Dash/CardCreator.js.

Recommendations For Unity8 versions prior to 8.11+16.04.20160122-0ubuntu1, consider restricting the use of the CardCreator.js file in the plugins/Dash directory until a patch is available. Avoid using the fallback image feature in the affected scope until the issue is resolved.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2016-1573

Produtos afetados

Unity8

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-1573 · Nota de Segurança
• https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138 · Nota
• https://osv.dev/vulnerability/CVE-2016-1573 · Aviso do Fabricante