CVE-2012-0960: Ps Project Management Team Unity-Firefox-Extension

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.

Affected products

• Ps Project Management Team Unity-Firefox-Extension: up to and including 2.4.0; version 0.02 only; version 0.2.1 only; version 0.3 only; version 0.3.1 only; version 2.1 only; …

Published 2012-11-24. Last modified 2026-06-16.