CVE-2013-1054

MEDIUM 6.5CVE-2013-1054 · Published 07/04/2021 · updated 16/06/2026

In short

CVE-2013-1054 is a MEDIUM (CVSS 6.5) vulnerability affecting unity-firefox-extension (canonical).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.3% of all vulnerabilities.
Fix: update to 3.0.0\+14.04.20140416-0ubuntu1.14.04.1 or later.

Package	Affected versions	Patched versions
unity-firefox-extension canonical	`< 3.0.0\+14.04.20140416-0ubuntu1.14.04.1`	`3.0.0\+14.04.20140416-0ubuntu1.14.04.1`

Description

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.

References

launchpad.net/bugs/1175661 · Exploit
ubuntu.com/USN-2743-3 · Vendor Advisory

More vulnerabilities in unity-firefox-extension

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free