Ps Project Management Team: >> Unity-Firefox-Extension Security Vulnerabilities
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.
CVSS Score
4.3
EPSS Score
0.003
Published
2012-12-26
Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.
CVSS Score
7.5
EPSS Score
0.023
Published
2012-11-24