CVE-2012-0960

Published: Nov 24, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.

Affected (13)

Products: Ps Project Management Team: Unity Firefox Extension

Ps Project Management Team

1 product

Unity Firefox Extension

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ps Project Management Team Unity Firefox Extension	Up to 2.4.0
Ps Project Management Team Unity Firefox Extension	Version 0.02
Ps Project Management Team Unity Firefox Extension	Version 0.2.1
Ps Project Management Team Unity Firefox Extension	Version 0.3.1
Ps Project Management Team Unity Firefox Extension	Version 0.3
Ps Project Management Team Unity Firefox Extension	Version 2.1
Ps Project Management Team Unity Firefox Extension	Version 2.2
Ps Project Management Team Unity Firefox Extension	Version 2.3.1
Ps Project Management Team Unity Firefox Extension	Version 2.3.2
Ps Project Management Team Unity Firefox Extension	Version 2.3.3
Ps Project Management Team Unity Firefox Extension	Version 2.3.4
Ps Project Management Team Unity Firefox Extension	Version 2.3.5
Ps Project Management Team Unity Firefox Extension	Version 2.3