ZDI-CAN-18978: ZDI-23-238: Unity Technologies Unity Editor DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18978?
The severity of ZDI-CAN-18978 is classified as high due to its potential for remote code execution.
How do I fix ZDI-CAN-18978?
To fix ZDI-CAN-18978, update your Unity Editor to the latest version provided by Unity Technologies that addresses this vulnerability.
What types of attackers can exploit ZDI-CAN-18978?
ZDI-CAN-18978 can be exploited by remote attackers who require user interaction, like visiting a malicious page or opening a malicious file.
What versions of Unity Editor are affected by ZDI-CAN-18978?
ZDI-CAN-18978 affects installations of Unity Technologies Unity Editor but specific versions may vary; always refer to the vendor for precise information.
Is user interaction required to exploit ZDI-CAN-18978?
Yes, user interaction is required to exploit ZDI-CAN-18978, as the target must visit malicious content or open a compromised file.