CVE-2012-0958
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same O…
Published: 2012-12-26 · CVSS: Unscored
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7