CVE-2016-1573

Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash

Medium · published April 22, 2019

CVSS v3.0
4.8
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00425 · 35.4th percentile
Published
2019-04-22T15:35Z
EPSS history
Timeline
  • 22 APR 15:35Z
    Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash
    cvelistv5