Description
Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1639-1
Issue Tracking x_refsource_confirm
https://bugs.launchpad.net/unity-firefox-extension/%2Bbug/1076350
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/56650
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80319
Scores
EPSS
0.0349
EPSS Percentile
87.8%
Details
CWE
CWE-20
Status
published
Products (13)
ps_project_management_team/unity-firefox-extension
0.02
ps_project_management_team/unity-firefox-extension
0.2.1
ps_project_management_team/unity-firefox-extension
0.3
ps_project_management_team/unity-firefox-extension
0.3.1
ps_project_management_team/unity-firefox-extension
2.1
ps_project_management_team/unity-firefox-extension
2.2
ps_project_management_team/unity-firefox-extension
2.3
ps_project_management_team/unity-firefox-extension
2.3.1
ps_project_management_team/unity-firefox-extension
2.3.2
ps_project_management_team/unity-firefox-extension
2.3.3
... and 3 more
Published
Nov 24, 2012
Tracked Since
Feb 18, 2026