Lucene search

[email protected]CVE-2017-12939

HistoryAug 18, 2017 - 1:29 p.m.

CVE-2017-12939

2017-08-1813:29:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2017-12939

remote code execution

windows

unity editor

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.3%

JSON

A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.

Affected configurations

NVD

Node

unity3dunity_editorMatch5.3.8

unity3dunity_editorMatch5.4.0

unity3dunity_editorMatch5.4.1

unity3dunity_editorMatch5.4.2

unity3dunity_editorMatch5.4.3

unity3dunity_editorMatch5.4.4

unity3dunity_editorMatch5.5.0

unity3dunity_editorMatch5.5.1

unity3dunity_editorMatch5.5.2

unity3dunity_editorMatch5.5.3

unity3dunity_editorMatch5.6.0

unity3dunity_editorMatch5.6.1

unity3dunity_editorMatch5.6.2

unity3dunity_editorMatch2017.1.0

AND

microsoftwindows

CPENameOperatorVersion
unity3d:unity_editorunity3d unity editoreq5.3.8
unity3d:unity_editorunity3d unity editoreq5.4.0
unity3d:unity_editorunity3d unity editoreq5.4.1
unity3d:unity_editorunity3d unity editoreq5.4.2
unity3d:unity_editorunity3d unity editoreq5.4.3
unity3d:unity_editorunity3d unity editoreq5.4.4
unity3d:unity_editorunity3d unity editoreq5.5.0
unity3d:unity_editorunity3d unity editoreq5.5.1
unity3d:unity_editorunity3d unity editoreq5.5.2
unity3d:unity_editorunity3d unity editoreq5.5.3

CPE	Name	Operator	Version
unity3d:unity_editor	unity3d unity editor	eq	5.3.8
unity3d:unity_editor	unity3d unity editor	eq	5.4.0
unity3d:unity_editor	unity3d unity editor	eq	5.4.1
unity3d:unity_editor	unity3d unity editor	eq	5.4.2
unity3d:unity_editor	unity3d unity editor	eq	5.4.3
unity3d:unity_editor	unity3d unity editor	eq	5.4.4
unity3d:unity_editor	unity3d unity editor	eq	5.5.0
unity3d:unity_editor	unity3d unity editor	eq	5.5.1
unity3d:unity_editor	unity3d unity editor	eq	5.5.2
unity3d:unity_editor	unity3d unity editor	eq	5.5.3

Rows per page:

1-10 of 141

References

www.securityfocus.com/bid/100444

twitter.com/0x09AL/status/898635999185711108

unity3d.com/security#issues

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.3%

JSON

Related for CVE-2017-12939

prion1 cvelist1 nvd1 avleonov1