ZDI-CAN-18980: ZDI-23-240: Unity Technologies Unity Editor FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published Mar 15, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Unity Technologies Unity Editor
Event History
Mar 15, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-18980?
The severity of ZDI-CAN-18980 is high due to its potential for remote code execution.
2
How do I fix ZDI-CAN-18980?
To fix ZDI-CAN-18980, users should update to the latest version of Unity Editor provided by Unity Technologies.
3
What type of vulnerability is ZDI-CAN-18980?
ZDI-CAN-18980 is a remote code execution vulnerability that requires user interaction to exploit.
4
What software is affected by ZDI-CAN-18980?
ZDI-CAN-18980 affects installations of Unity Technologies Unity Editor.
5
What are the implications of ZDI-CAN-18980?
If exploited, ZDI-CAN-18980 may allow attackers to execute arbitrary code on the affected systems.