CVEs related to bugs in WebApps: unity-firefox-extension

Open bugs

Bug	CVE(s)
Bug #1076350: Crash when navigating to another page immediately after initializing unity integration	CVE-2012-0960
WebApps: unity-firefox-extension	Fix committed by Maxim Ermilov
Bug #1111732: Remove the automatic generation of the *_gen_* private functions jsc-types bindings	CVE-2012-0958 CVE-2012-0960
WebApps: unity-firefox-extension	New (unassigned)
Bug #1175661: Possible remote DOS when spinning the event loop during webapps initialization callback	CVE-2013-1054
WebApps: unity-firefox-extension	Confirmed, assigned to Alexandre Abreu
Bug #1175691: Rate limit in libunity-webapps can be abused to make Firefox collect C callbacks that are still in use	CVE-2013-1055
WebApps: unity-firefox-extension	Confirmed, assigned to Alexandre Abreu

Resolved bugs

Bug	CVE(s)
Bug #1069817: Bypasses Same Origin Policy checks via toDataURL()	CVE-2012-0958
WebApps: unity-firefox-extension	Fix released, assigned to Maxim Ermilov