{"id":"CVE-2016-1573","details":"Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.","modified":"2026-04-10T03:49:26.353609Z","published":"2019-04-22T16:29:01.117Z","references":[{"type":"ADVISORY","url":"https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ubports/unity8","events":[{"introduced":"0"},{"fixed":"73bdb21d0f2e410cd0424d319db34da1ea60386f"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"8.11\\+16.04.20160122-0ubuntu1"}]}}],"versions":["7.84+14.04.20140207.1-0ubuntu1","7.84+14.04.20140212-0ubuntu1","7.84+14.04.20140218-0ubuntu1","7.84+14.04.20140221-0ubuntu1","7.84+14.04.20140228-0ubuntu1","7.84+14.04.20140304-0ubuntu1","7.84+14.04.20140306-0ubuntu1","7.84+14.04.20140307-0ubuntu1","7.84+14.04.20140314-0ubuntu1","7.84+14.04.20140317.2-0ubuntu1","7.84+14.04.20140319.1-0ubuntu1","7.84+14.04.20140324.4-0ubuntu1","7.84+14.04.20140327.1-0ubuntu1","7.85+14.04.20140401.3-0ubuntu1","7.85+14.04.20140403.1-0ubuntu1","7.85+14.04.20140404-0ubuntu1","7.85+14.04.20140410.1-0ubuntu1","7.85+14.04.20140415.2-0ubuntu1","7.85+14.04.20140416-0ubuntu1","7.86+14.10.20140429.2-0ubuntu1","7.86+14.10.20140502.6-0ubuntu1","7.86+14.10.20140505-0ubuntu1","7.86+14.10.20140507.3-0ubuntu1","7.86+14.10.20140513-0ubuntu1","7.86+14.10.20140514.1-0ubuntu1","7.86+14.10.20140516.2-0ubuntu1","7.86+14.10.20140516.5-0ubuntu1","7.86+14.10.20140519-0ubuntu1","7.86+14.10.20140522-0ubuntu1","7.86+14.10.20140527-0ubuntu1","7.87+14.10.20140530.1-0ubuntu1","7.87+14.10.20140603.1-0ubuntu1","7.88+14.10.20140603.1-0ubuntu1","7.88+14.10.20140606-0ubuntu1","7.89+14.10.20140613-0ubuntu1","7.89+14.10.20140616.1-0ubuntu1","7.89+14.10.20140619.2-0ubuntu1","7.89+14.10.20140619.3-0ubuntu1","7.89+14.10.20140623.1-0ubuntu1","7.89+14.10.20140624-0ubuntu1","7.89+14.10.20140624.1-0ubuntu1","7.89+14.10.20140627-0ubuntu1","7.90+14.10.20140701.2-0ubuntu1","7.90+14.10.20140703.1-0ubuntu1","7.90+14.10.20140707-0ubuntu1","7.90+14.10.20140709.2-0ubuntu1","7.90+14.10.20140714-0ubuntu1","7.90+14.10.20140717.1-0ubuntu1","7.90+14.10.20140717.3-0ubuntu1","7.90+14.10.20140721.1-0ubuntu1","7.90+14.10.20140723.4-0ubuntu1","7.90+14.10.20140724.1-0ubuntu1","7.90+14.10.20140725-0ubuntu1","8.00+14.10.20140729-0ubuntu1","8.00+14.10.20140729.1-0ubuntu1","8.00+14.10.20140731.1-0ubuntu1","8.00+14.10.20140805-0ubuntu1","8.00+14.10.20140806.1-0ubuntu1","8.00+14.10.20140808-0ubuntu1","8.00+14.10.20140811-0ubuntu1","8.00+14.10.20140814.1-0ubuntu1","8.00+14.10.20140815.1-0ubuntu1","8.00+14.10.20140817-0ubuntu1","8.00+14.10.20140820-0ubuntu1","8.00+14.10.20140822-0ubuntu1","8.00+14.10.20140825.3-0ubuntu1","8.00+14.10.20140827.2-0ubuntu1","8.00+14.10.20140828.1-0ubuntu1","8.00+14.10.20140903.1-0ubuntu1","8.00+14.10.20140908.1-0ubuntu1","8.00+14.10.20140910.1-0ubuntu1","8.00+14.10.20140918-0ubuntu1","8.00+14.10.20140918.3-0ubuntu1","8.00+14.10.20140923-0ubuntu1","8.00+14.10.20140926-0ubuntu1","8.00+14.10.20140930.2-0ubuntu1","8.00+14.10.20141006-0ubuntu1","8.00+14.10.20141008-0ubuntu1","8.00+14.10.20141009.4-0ubuntu1","8.00+14.10.20141013.2-0ubuntu1","8.00+15.04.20141030-0ubuntu1","8.01+15.04.20141030-0ubuntu1","8.01+15.04.20141104-0ubuntu1","8.01+15.04.20141107.2-0ubuntu1","8.01+15.04.20141117-0ubuntu1","8.01+15.04.20141125.2-0ubuntu1","8.01+15.04.20141202-0ubuntu1","8.01+15.04.20141204-0ubuntu1","8.01+15.04.20141205-0ubuntu1","8.02+15.04.20141211.2-0ubuntu1","8.02+15.04.20141212.1-0ubuntu1","8.02+15.04.20141215.3-0ubuntu1","8.02+15.04.20141216.1-0ubuntu1","8.02+15.04.20150109.2-0ubuntu1","8.02+15.04.20150113.1-0ubuntu1","8.02+15.04.20150121.2-0ubuntu1","8.02+15.04.20150123.3-0ubuntu1","8.02+15.04.20150205-0ubuntu1","8.02+15.04.20150211-0ubuntu1","8.02+15.04.20150211-0ubuntu2","8.02+15.04.20150216.1-0ubuntu1","8.02+15.04.20150224-0ubuntu1","8.02+15.04.20150226-0ubuntu1","8.02+15.04.20150302-0ubuntu1","8.02+15.04.20150302-0ubuntu2","8.02+15.04.20150318-0ubuntu1","8.02+15.04.20150320-0ubuntu1","8.02+15.04.20150409.1-0ubuntu1","8.02+15.04.20150422-0ubuntu1","8.02+15.04.20150423-0ubuntu1","8.02+15.04.20150505-0ubuntu1","8.02+15.04.20150511-0ubuntu1","8.02+15.10.20150518.1-0ubuntu1","8.02+15.10.20150603.1-0ubuntu1","8.10+15.10.20150612-0ubuntu1","8.10+15.10.20150612-0ubuntu2","8.10+15.10.20150616.1-0ubuntu1","8.10+15.10.20150618-0ubuntu1","8.10+15.10.20150702.2-0ubuntu1","8.10+15.10.20150708.2-0ubuntu1","8.10+15.10.20150713-0ubuntu1","8.10+15.10.20150717-0ubuntu1","8.10+15.10.20150721-0ubuntu1","8.10+15.10.20150729-0ubuntu1","8.10+15.10.20150804-0ubuntu1","8.11+15.04.20150811-0ubuntu1","8.11+15.04.20150812-0ubuntu1","8.11+15.04.20150814-0ubuntu1","8.11+15.04.20150817-0ubuntu1","8.11+15.04.20150821-0ubuntu1","8.11+15.04.20150827.1-0ubuntu1","8.11+15.04.20150831.2-0ubuntu1","8.11+15.10.20150907-0ubuntu1","8.11+15.10.20150915-0ubuntu1","8.11+15.10.20150922.1-0ubuntu1","8.11+15.10.20150925-0ubuntu1","8.11+15.10.20150930.1-0ubuntu1","8.11+15.10.20151001-0ubuntu1","8.11+15.10.20151002-0ubuntu1","8.11+15.10.20151008-0ubuntu1","8.11+15.10.20151009-0ubuntu1","8.11+15.10.20151021-0ubuntu1","8.11+16.04.20151104-0ubuntu1","8.11+16.04.20151112.1-0ubuntu1","8.11+16.04.20151126-0ubuntu1","8.11+16.04.20151126-0ubuntu2","8.11+16.04.20151208.1-0ubuntu1","8.11+16.04.20160105.1-0ubuntu1","8.11+16.04.20160107-0ubuntu1","8.11+16.04.20160111.1-0ubuntu1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1573.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}