CVE-2016-1573medium

CVE-2016-1573: medium-severity vulnerability in Ubuntu Unity8

Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash

Published · Updated

Follow this CVE+ Monitor Unity8

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.4%
Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected products
Ubuntu · Unity8
Related CVEs — Ubuntu Unity8

In the same product, most dangerous first.

CVE-2016-1584LOWUnity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-mostEPSS 0.9%