Description
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.mozilla.org/security/announce/2013/mfsa2013-105.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html ↗
- https://bugzilla.mozilla.org/show_bug.cgi?id=771294 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html ↗
- http://www.securitytracker.com/id/1029470 ↗
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html ↗
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html ↗
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html ↗
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html ↗
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html ↗
- http://www.ubuntu.com/usn/USN-2052-1 ↗