Unrated severityNVD Advisory· Published Dec 26, 2012· Updated Jun 16, 2026

CVE-2012-0958

Description

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ps Project Management Team/Unity Firefox Extension
cpe:2.3:a:ps_project_management_team:unity-firefox-extension:2.4.1:-:*:*:*:firefox:*:*
Ubuntu/unity-firefox-extensionllm-create
Range: =2.4.1

Patches

Vulnerability mechanics

References

bazaar.launchpad.net/~webapps/unity-firefox-extension/trunk/revision/331nvd
osvdb.org/88438nvd
www.securityfocus.com/bid/56930nvd
www.ubuntu.com/usn/USN-1665-1nvd
bugs.launchpad.net/ubuntu/%2Bsource/unity-firefox-extension/%2Bbug/1069817nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000