VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 7, 2021· Updated Jun 16, 2026

CVE-2013-1054

CVE-2013-1054

Description

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Canonical/unity-firefox-extension
    cpe:2.3:a:canonical:unity-firefox-extension:*:*:*:*:*:*:*:*
    Range: <3.0.0\+14.04.20140416-0ubuntu1.14.04.1
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
  • Ubuntu/unity-firefox-extensionllm-fuzzy
  • Canonical/unity-firefox-extensionv5
    Range: 3.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.