CVE catalog
CVE-2013-1055
UBUNTU-CVE-2013-1055
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.27% · Oct 25, 2026
The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was hit. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 of unity-firefox-extension and in all versions of libunity-webapps by shipping an empty unity-firefox-extension package, thus disabling the extension entirely and invalidating the attack against the libunity-webapps package.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | unity-firefox-extension | 14.04 | 2.4.8+13.10.20130920-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140130.1-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140205-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140220-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140411-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140416-0ubuntu1 | vulnerable |
| Ubuntu | unity-firefox-extension | 14.04 | 3.0.0+14.04.20140416-0ubuntu1.14.04.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | unity-firefox-extension | deb | 14.04 | 3.0.0+14.04.20140416-0ubuntu1.14.04.1 | Not reported | UBUNTU-CVE-2013-1055 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: