Aller au contenu
4.3 Moyenne

CVE-2013-1054 The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash

Description

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.

Produits et versions touchés

Produit Versions touchées Corrigé en
unity-firefox-extension 3.0 3.0.0 → < 3.0.0+14.04.20140416-0ubuntu1.14.04.1 3.0.0+14.04.20140416-0ubuntu1.14.04.1
Les 2 CVE de unity-firefox-extension →
Suivre cette CVE