Описание
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [3.0.0+14.04.20140416-0ubuntu1.14.04.1]] |
| lucid | DNE | |
| precise | DNE | |
| quantal | ignored | end of life |
| raring | ignored | end of life |
| saucy | ignored | end of life |
| trusty | released | 3.0.0+14.04.20140416-0ubuntu1.14.04.1 |
| trusty/esm | DNE | trusty was released [3.0.0+14.04.20140416-0ubuntu1.14.04.1] |
| upstream | needs-triage |
Показывать по
4.3 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
Уязвимость пакета Unity-firefox-extension операционной системы Ubuntu, позволяющая нарушителю вызвать отказ в обслуживании
4.3 Medium
CVSS2
4.3 Medium
CVSS3