CVE-2013-1054CWE-404

Possible remote DOS in WebApps

Medium · published April 7, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01341 · 71.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2021-04-07T19:20Z
EPSS history
Timeline
  • 07 APR 19:20Z
    Possible remote DOS in WebApps
    cvelistv5