CVE-2017-12939 A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before....
CriticalCVSS 9.8
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unity3d unity editor | = 5.3.8 | No fix listed |
| unity3d unity editor | = 5.4.0 | No fix listed |
| unity3d unity editor | = 5.4.1 | No fix listed |
| unity3d unity editor | = 5.4.2 | No fix listed |
| unity3d unity editor | = 5.4.3 | No fix listed |
| unity3d unity editor | = 5.4.4 | No fix listed |
| unity3d unity editor | = 5.5.0 | No fix listed |
| unity3d unity editor | = 5.5.1 | No fix listed |
| unity3d unity editor | = 5.5.2 | No fix listed |
| unity3d unity editor | = 5.5.3 | No fix listed |
| unity3d unity editor | = 5.6.0 | No fix listed |
| unity3d unity editor | = 5.6.1 | No fix listed |
| unity3d unity editor | = 5.6.2 | No fix listed |
| unity3d unity editor | = 2017.1.0 | No fix listed |
References
- 100444 third-party-advisory vdb-entry
- twitter.com
- unity3d.com patch vendor-advisory