CVE-2012-0960 in Ubuntu Linux

요약 (영어)

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.

예약하다

2012. 02. 01.

공개

2012. 11. 24.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
7023	Ubuntu Linux unity-firefox-extension unity-global-property-initializer.js 권한 상승	20	개념 증명	공식 수정	CVE-2012-0960