CVE-2013-1054

published 2021-04-07

CVE-2013-1054: The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning…

Priority P4 25 medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I N A H

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	unity-firefox-extension	< 3.0.0\+14.04.20140416-0ubuntu1.14.04.1	3.0.0\+14.04.20140416-0ubuntu1.14.04.1
canonical	unity-firefox-extension	>= 0 < 3.0.0+14.04.20140416-0ubuntu1.14.04.1	3.0.0+14.04.20140416-0ubuntu1.14.04.1
canonical	unity-firefox-extension	>= 3.0.0 < 3.0.0+14.04.20140416-0ubuntu1.14.04.1	3.0.0+14.04.20140416-0ubuntu1.14.04.1

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P

osv 6.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-404