CVE-2012-0960 in Ubuntu Linux
Summary
Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
02/01/2012
Disclosure
11/24/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7023 | Ubuntu Linux unity-firefox-extension unity-global-property-initializer.js input validation | 20 | Proof-of-Concept | Official fix | CVE-2012-0960 |