ZDI-23-235: Unity Technologies Unity Editor DAE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-235?
The severity of ZDI-23-235 is critical, allowing remote code execution on affected Unity Editor installations.
How do I fix ZDI-23-235?
To fix ZDI-23-235, users should update to the latest version of Unity Editor provided by Unity Technologies.
What are the potential impacts of ZDI-23-235?
The potential impacts of ZDI-23-235 include unauthorized access, data loss, and system compromise due to arbitrary code execution.
Is user interaction required to exploit ZDI-23-235?
Yes, user interaction is required to exploit ZDI-23-235, as the user must visit a malicious page or open a malicious file.
Who is affected by ZDI-23-235?
Users of Unity Technologies Unity Editor are affected by ZDI-23-235.