CVEvulnerability

CVE-2017-12939

9.8 CRITICAL Published 2017-08-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.

Affected configurations

• unity3d unity editor 5.3.8 • unity3d unity editor 5.4.0 • unity3d unity editor 5.4.1 • unity3d unity editor 5.4.2 • unity3d unity editor 5.4.3 • unity3d unity editor 5.4.4 • unity3d unity editor 5.5.0 • unity3d unity editor 5.5.1 • unity3d unity editor 5.5.2 • unity3d unity editor 5.5.3 • unity3d unity editor 5.6.0 • unity3d unity editor 5.6.1 • unity3d unity editor 5.6.2 • unity3d unity editor 2017.1.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References