Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

unity-firefox-extension: code execution

Package(s):

unity-firefox-extension

CVE #(s):

CVE-2012-0960

Created:

November 22, 2012

Updated:

November 28, 2012

Description:

From the Ubuntu advisory:

It was discovered that unity-firefox-extension incorrectly handled certain callbacks. A remote attacker could use this issue to cause unity-firefox-extension to crash, resulting in a denial of service, or possibly execute arbitrary code.

Alerts:

Ubuntu

USN-1639-1

2012-11-22

(Log in to post comments)