Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

Ubuntu 12.10: 1665-1 Moderate Unity-Firefox-Extension Information Exposure

ubuntu
Calendar Grey December 13, 2012
Scroller Ubuntu
Enhance your Ubuntu installation to fix the vulnerability in the unity-firefox-extension, which could potentially leak confidential data.
unity-firefox-extension could be made to expose sensitive information over the network.

Summary

unity-firefox-extension could be made to expose sensitive information over

the network.

Software Description:

- unity-firefox-extension: Firefox extension: Unity Integration

Details:

It was discovered that unity-firefox-extension bypassed the same origin

policy checks in certain circumstances. If a user were tricked into opening

a malicious page, an attacker could exploit this to steal confidential data

or perform other security-sensitive operations.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat information exposure unity-firefox-extension

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  xul-ext-unity                   2.4.1-0ubuntu1.2

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-1665-1

CVE-2012-0958

Severity
important
Lowest
Low
Medium
High
Critical

December 13, 2012

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat information exposure unity-firefox-extension

Package Information

https://launchpad.net/ubuntu/+source/unity-firefox-extension/2.4.1-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.