Vulnerabilities > CVE-2016-1573 - Use After Free vulnerability in Unity8

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

unity8

ubports

CWE-416

NVD

Published: 2019-04-22

Updated: 2019-10-09

Summary

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.

Vulnerable Configurations

Part	Description	Count
Application	Ubports Ubports Unity8 - Ubports Unity8 7.84\+14.04.20140207.1-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140212-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140218-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140221-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140228-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140304-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140306-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140307-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140314-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140317.2-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140319.1-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140324.4-0Ubuntu1 Ubports Unity8 7.84\+14.04.20140327.1-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140401.3-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140403.1-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140404-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140410.1-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140415.2-0Ubuntu1 Ubports Unity8 7.85\+14.04.20140416-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140429.2-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140502.6-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140505-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140507.3-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140513-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140514.1-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140516.2-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140516.5-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140519-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140522-0Ubuntu1 Ubports Unity8 7.86\+14.10.20140527-0Ubuntu1 Ubports Unity8 7.87\+14.10.20140530.1-0Ubuntu1 Ubports Unity8 7.87\+14.10.20140603.1-0Ubuntu1 Ubports Unity8 7.88\+14.10.20140603.1-0Ubuntu1 Ubports Unity8 7.88\+14.10.20140606-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140613-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140616.1-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140619.2-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140619.3-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140623.1-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140624-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140624.1-0Ubuntu1 Ubports Unity8 7.89\+14.10.20140627-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140701.2-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140703.1-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140707-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140709.2-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140714-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140717.1-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140717.3-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140721.1-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140723.4-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140724.1-0Ubuntu1 Ubports Unity8 7.90\+14.10.20140725-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140729-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140729.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140731.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140805-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140806.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140808-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140811-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140814.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140815.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140817-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140820-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140822-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140825.3-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140827.2-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140828.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140903.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140908.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140910.1-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140918-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140918.3-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140923-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140926-0Ubuntu1 Ubports Unity8 8.00\+14.10.20140930.2-0Ubuntu1 Ubports Unity8 8.00\+14.10.20141006-0Ubuntu1 Ubports Unity8 8.00\+14.10.20141008-0Ubuntu1 Ubports Unity8 8.00\+14.10.20141009.4-0Ubuntu1 Ubports Unity8 8.00\+14.10.20141013.2-0Ubuntu1 Ubports Unity8 8.00\+15.04.20141030-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141030-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141104-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141107.2-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141117-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141125.2-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141202-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141204-0Ubuntu1 Ubports Unity8 8.01\+15.04.20141205-0Ubuntu1 Ubports Unity8 8.02\+15.04.20141211.2-0Ubuntu1 Ubports Unity8 8.02\+15.04.20141212.1-0Ubuntu1 Ubports Unity8 8.02\+15.04.20141215.3-0Ubuntu1 Ubports Unity8 8.02\+15.04.20141216.1-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150109.2-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150113.1-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150121.2-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150123.3-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150205-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150211-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150211-0Ubuntu2 Ubports Unity8 8.02\+15.04.20150216.1-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150224-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150226-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150302-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150302-0Ubuntu2 Ubports Unity8 8.02\+15.04.20150318-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150320-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150409.1-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150422-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150423-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150505-0Ubuntu1 Ubports Unity8 8.02\+15.04.20150511-0Ubuntu1 Ubports Unity8 8.02\+15.10.20150518.1-0Ubuntu1 Ubports Unity8 8.02\+15.10.20150603.1-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150612-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150612-0Ubuntu2 Ubports Unity8 8.10\+15.10.20150616.1-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150618-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150702.2-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150708.2-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150713-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150717-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150721-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150729-0Ubuntu1 Ubports Unity8 8.10\+15.10.20150804-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150811-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150812-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150814-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150817-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150821-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150827.1-0Ubuntu1 Ubports Unity8 8.11\+15.04.20150831.2-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150826-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150907-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150915-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150922.1-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150925-0Ubuntu1 Ubports Unity8 8.11\+15.10.20150930.1-0Ubuntu1 Ubports Unity8 8.11\+15.10.20151001-0Ubuntu1 Ubports Unity8 8.11\+15.10.20151002-0Ubuntu1 Ubports Unity8 8.11\+15.10.20151008-0Ubuntu1 Ubports Unity8 8.11\+15.10.20151009-0Ubuntu1 Ubports Unity8 8.11\+15.10.20151021-0Ubuntu1 Ubports Unity8 8.11\+16.04.20151104-0Ubuntu1 Ubports Unity8 8.11\+16.04.20151112.1-0Ubuntu1 Ubports Unity8 8.11\+16.04.20151126-0Ubuntu1 Ubports Unity8 8.11\+16.04.20151126-0Ubuntu2 Ubports Unity8 8.11\+16.04.20151208.1-0Ubuntu1 Ubports Unity8 8.11\+16.04.20160105.1-0Ubuntu1 Ubports Unity8 8.11\+16.04.20160107-0Ubuntu1 Ubports Unity8 8.11\+16.04.20160111.1-0Ubuntu1	152

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138