Chrisccoulson

The issue is related to resource release errors in the unity-firefox-extension package. It can be exploited by a remote attacker to cause a denial of service. The exploitation involves tricking the package into dropping a C callback that is still in use, leading to a crash when Firefox attempts to free it. This can be achieved by adding an action to the launcher and updating it with new callbacks until a rate limit is hit.

The issue is related to the unity-firefox-extension package, which could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. The problem is also associated with resource release errors.

The issue is related to a use-after-free condition that can be triggered by remote attackers, potentially leading to a denial of service (crash) or the execution of arbitrary code. This is achieved by deleting all WebContents while a RenderProcessHost instance still exists.

The issue is related to a use-after-free vulnerability, which can be triggered by remote attackers via a crafted web site. This vulnerability is associated with certain hash tables and can cause a denial of service due to memory corruption and crash. It may also allow the execution of arbitrary code.