NetSight
high8.8

CVE-2019-9197

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

Impact

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

Affected products

VendorProductAffected versions
Unity3dUnity Editor
from 5.6.0 before 5.6.7f1
from 2017.4.22 before 2017.4.22f1
from 2018.2.21 before 2018.2.21f1
from 2018.3.7 before 2018.3.7f1
from 2019.1.0 before 2019.1.0b5
from 2019.2.0 before 2019.2.0a7

Weakness classification

References