CVE-2013-1054 vulnerability in Canonical Products
Published on April 7, 2021
Possible remote DOS in WebApps
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
Vulnerability Analysis
CVE-2013-1054 is exploitable with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.
Weakness Type
Improper Resource Shutdown or Release
The program does not release or incorrectly releases a resource before it is made available for re-use. When a resource is created or allocated, the developer is responsible for properly releasing the resource as well as accounting for all potential paths of expiration or invalidation, such as a set period of time or revocation.
Products Associated with CVE-2013-1054
stack.watch emails you whenever new vulnerabilities are published in Canonical Unity Firefox Extension or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Canonical unity-firefox-extension:- Version 3.0.0 and below 3.0.0+14.04.20140416-0ubuntu1.14.04.1 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.