CVE-2016-1573 Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

CVE-2016-1584 Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most

In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...

CVE-2016-1573

CVE-2016-1573 affects Unity8 before 8.11+16.04.20160122-0ubuntu1. The vulnerability arises from plugins/Dash/CardCreator.js where a specially crafted fallback art property supplied by a scope can cause code execution. In the CVE context, this allows arbitrary QML code execution within the unity8-...

CVE-2016-1584

CVE-2016-1584 concerns Unity8 on large-screen devices where a running but non-active application could communicate with Maliit and consume keyboard input. The connected sources confirm this is a vulnerability in the Unity8/converged application lifecycle, allowing background apps to interact with...

CVE-2016-1573: Use After Free

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

PT-2019-7812

Name of the Vulnerable Software and Affected Versions Unity8 versions all Description The issue allows a running but not active application on a large-screen device to communicate with Maliit and consume keyboard input. Recommendations For all versions of Unity8, consider restricting access to...

PT-2019-7810

Name of the Vulnerable Software and Affected Versions Unity8 versions prior to 8.11+16.04.20160122-0ubuntu1 Description The issue allows execution of arbitrary code when a fallback image supplied by a scope is used in place of a legitimate image. This is due to a flaw in the file...

CVE-2016-1584: Undefined Security Weakness

In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input...

CVE-2016-1573

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...