CVE-2012-0960

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.

Published: Nov 24, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-0960
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
ps_project_management_team / unity-firefox-extension	-	2.4.0.x
ps_project_management_team / unity-firefox-extension	2.3.4	2.3.4.x
ps_project_management_team / unity-firefox-extension	2.1	2.1.x
ps_project_management_team / unity-firefox-extension	2.3.2	2.3.2.x
ps_project_management_team / unity-firefox-extension	0.2.1	0.2.1.x
ps_project_management_team / unity-firefox-extension	2.3.5	2.3.5.x
ps_project_management_team / unity-firefox-extension	0.3.1	0.3.1.x
ps_project_management_team / unity-firefox-extension	2.3.1	2.3.1.x
ps_project_management_team / unity-firefox-extension	0.3	0.3.x
ps_project_management_team / unity-firefox-extension	0.02	0.02.x
ps_project_management_team / unity-firefox-extension	2.3.3	2.3.3.x
ps_project_management_team / unity-firefox-extension	2.2	2.2.x
ps_project_management_team / unity-firefox-extension	2.3	2.3.x

Vulnerability Database

289,697

CVE-2012-0960