Lucene search
HistoryDec 26, 2012 - 10:55 p.m.
CVE-2012-0958
cve-2012-0958
content
unity-api.js
unity-firefox-extension
same origin policy
remote attackers
sensitive information
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
54.3%
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.
Related
ubuntucve
ubuntucve
CVE-2012-0958
2012-11-06 00:00:00
securityvulns
securityvulns
[USN-1665-1] unity-firefox-extension vulnerability
2012-12-17 00:00:00
unity firefox extension crossorigin policy bypass
2012-12-17 00:00:00
openvas
openvas
Ubuntu Update for unity-firefox-extension USN-1665-1
2012-12-14 00:00:00
Ubuntu: Security Advisory (USN-1665-1)
2012-12-14 00:00:00
nessus
nessus
Ubuntu 12.10 : unity-firefox-extension vulnerability (USN-1665-1)
2012-12-14 00:00:00
ubuntu
ubuntu
unity-firefox-extension vulnerability
2012-12-13 00:00:00
prion
prion
Design/Logic Flaw
2012-12-26 22:55:00
6.1 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
54.3%
Related for CVE-2012-0958