CVE-2013-1054: canonical ubuntu_linux Improper Resource Shutdown or Release
Vulnerability summary
CVE-2013-1054 is a medium (CVSS 6.5) Improper Resource Shutdown or Release vulnerability in canonical ubuntu_linux. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 70.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 07-04-2021PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
CVSS metrics
4 scores · 3 sources · 2 versions- CVE.orgCNA4.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LDiffers
EPSS trend
Probability
1.34%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
0.00 pp
From 1.34% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (launchpad.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Canonical2 products
- ubuntu_linuxEOL14.04 | 15.04
- unity-firefox-extension≥ 3.0.0, < 3.0.0+14.04.20140416-0ubuntu1.14.04.1 | < 3.0.0\+14.04.20140416-0ubuntu1.14.04.1
Ubuntu1 product
- unity-firefox-extension< 3.0.0+14.04.20140416-0ubuntu1.14.04.1
2 vendors · 3 products