Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a (1) add-on or (2) theme via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | * | 4.0.1 (including) |
| Firefox | Mozilla | 1.0 (including) | 1.0 (including) |
| Firefox | Mozilla | 1.0-preview_release (including) | 1.0-preview_release (including) |
| Firefox | Mozilla | 1.0.1 (including) | 1.0.1 (including) |
| Firefox | Mozilla | 1.0.2 (including) | 1.0.2 (including) |
| Firefox | Mozilla | 1.0.3 (including) | 1.0.3 (including) |
| Firefox | Mozilla | 1.0.4 (including) | 1.0.4 (including) |
| Firefox | Mozilla | 1.0.5 (including) | 1.0.5 (including) |
| Firefox | Mozilla | 1.0.6 (including) | 1.0.6 (including) |
| Firefox | Mozilla | 1.0.7 (including) | 1.0.7 (including) |
| Firefox | Mozilla | 1.0.8 (including) | 1.0.8 (including) |
| Firefox | Mozilla | 1.5 (including) | 1.5 (including) |
| Firefox | Mozilla | 1.5-beta1 (including) | 1.5-beta1 (including) |
| Firefox | Mozilla | 1.5-beta2 (including) | 1.5-beta2 (including) |
| Firefox | Mozilla | 1.5.0.1 (including) | 1.5.0.1 (including) |
| Firefox | Mozilla | 1.5.0.2 (including) | 1.5.0.2 (including) |
| Firefox | Mozilla | 1.5.0.3 (including) | 1.5.0.3 (including) |
| Firefox | Mozilla | 1.5.0.4 (including) | 1.5.0.4 (including) |
| Firefox | Mozilla | 1.5.0.5 (including) | 1.5.0.5 (including) |
| Firefox | Mozilla | 1.5.0.6 (including) | 1.5.0.6 (including) |
| Firefox | Mozilla | 1.5.0.7 (including) | 1.5.0.7 (including) |
| Firefox | Mozilla | 1.5.0.8 (including) | 1.5.0.8 (including) |
| Firefox | Mozilla | 1.5.0.9 (including) | 1.5.0.9 (including) |
| Firefox | Mozilla | 1.5.0.10 (including) | 1.5.0.10 (including) |
| Firefox | Mozilla | 1.5.0.11 (including) | 1.5.0.11 (including) |
| Firefox | Mozilla | 1.5.0.12 (including) | 1.5.0.12 (including) |
| Firefox | Mozilla | 1.5.1 (including) | 1.5.1 (including) |
| Firefox | Mozilla | 1.5.2 (including) | 1.5.2 (including) |
| Firefox | Mozilla | 1.5.3 (including) | 1.5.3 (including) |
| Firefox | Mozilla | 1.5.4 (including) | 1.5.4 (including) |
| Firefox | Mozilla | 1.5.5 (including) | 1.5.5 (including) |
| Firefox | Mozilla | 1.5.6 (including) | 1.5.6 (including) |
| Firefox | Mozilla | 1.5.7 (including) | 1.5.7 (including) |
| Firefox | Mozilla | 1.5.8 (including) | 1.5.8 (including) |
| Firefox | Mozilla | 2.0 (including) | 2.0 (including) |
| Firefox | Mozilla | 2.0.0.1 (including) | 2.0.0.1 (including) |
| Firefox | Mozilla | 2.0.0.2 (including) | 2.0.0.2 (including) |
| Firefox | Mozilla | 2.0.0.3 (including) | 2.0.0.3 (including) |
| Firefox | Mozilla | 2.0.0.4 (including) | 2.0.0.4 (including) |
| Firefox | Mozilla | 2.0.0.5 (including) | 2.0.0.5 (including) |
| Firefox | Mozilla | 2.0.0.6 (including) | 2.0.0.6 (including) |
| Firefox | Mozilla | 2.0.0.7 (including) | 2.0.0.7 (including) |
| Firefox | Mozilla | 2.0.0.8 (including) | 2.0.0.8 (including) |
| Firefox | Mozilla | 2.0.0.9 (including) | 2.0.0.9 (including) |
| Firefox | Mozilla | 2.0.0.10 (including) | 2.0.0.10 (including) |
| Firefox | Mozilla | 2.0.0.11 (including) | 2.0.0.11 (including) |
| Firefox | Mozilla | 2.0.0.12 (including) | 2.0.0.12 (including) |
| Firefox | Mozilla | 2.0.0.13 (including) | 2.0.0.13 (including) |
| Firefox | Mozilla | 2.0.0.14 (including) | 2.0.0.14 (including) |
| Firefox | Mozilla | 2.0.0.15 (including) | 2.0.0.15 (including) |
| Firefox | Mozilla | 2.0.0.16 (including) | 2.0.0.16 (including) |
| Firefox | Mozilla | 2.0.0.17 (including) | 2.0.0.17 (including) |
| Firefox | Mozilla | 2.0.0.18 (including) | 2.0.0.18 (including) |
| Firefox | Mozilla | 2.0.0.19 (including) | 2.0.0.19 (including) |
| Firefox | Mozilla | 2.0.0.20 (including) | 2.0.0.20 (including) |
| Firefox | Mozilla | 3.0 (including) | 3.0 (including) |
| Firefox | Mozilla | 3.0.1 (including) | 3.0.1 (including) |
| Firefox | Mozilla | 3.0.2 (including) | 3.0.2 (including) |
| Firefox | Mozilla | 3.0.3 (including) | 3.0.3 (including) |
| Firefox | Mozilla | 3.0.4 (including) | 3.0.4 (including) |
| Firefox | Mozilla | 3.0.5 (including) | 3.0.5 (including) |
| Firefox | Mozilla | 3.0.6 (including) | 3.0.6 (including) |
| Firefox | Mozilla | 3.0.7 (including) | 3.0.7 (including) |
| Firefox | Mozilla | 3.0.8 (including) | 3.0.8 (including) |
| Firefox | Mozilla | 3.0.9 (including) | 3.0.9 (including) |
| Firefox | Mozilla | 3.0.10 (including) | 3.0.10 (including) |
| Firefox | Mozilla | 3.0.11 (including) | 3.0.11 (including) |
| Firefox | Mozilla | 3.0.12 (including) | 3.0.12 (including) |
| Firefox | Mozilla | 3.0.13 (including) | 3.0.13 (including) |
| Firefox | Mozilla | 3.0.14 (including) | 3.0.14 (including) |
| Firefox | Mozilla | 3.0.15 (including) | 3.0.15 (including) |
| Firefox | Mozilla | 3.0.16 (including) | 3.0.16 (including) |
| Firefox | Mozilla | 3.0.17 (including) | 3.0.17 (including) |
| Firefox | Mozilla | 3.5 (including) | 3.5 (including) |
| Firefox | Mozilla | 3.5.1 (including) | 3.5.1 (including) |
| Firefox | Mozilla | 3.5.2 (including) | 3.5.2 (including) |
| Firefox | Mozilla | 3.5.3 (including) | 3.5.3 (including) |
| Firefox | Mozilla | 3.5.4 (including) | 3.5.4 (including) |
| Firefox | Mozilla | 3.5.5 (including) | 3.5.5 (including) |
| Firefox | Mozilla | 3.5.6 (including) | 3.5.6 (including) |
| Firefox | Mozilla | 3.5.7 (including) | 3.5.7 (including) |
| Firefox | Mozilla | 3.5.8 (including) | 3.5.8 (including) |
| Firefox | Mozilla | 3.5.9 (including) | 3.5.9 (including) |
| Firefox | Mozilla | 3.5.10 (including) | 3.5.10 (including) |
| Firefox | Mozilla | 3.5.11 (including) | 3.5.11 (including) |
| Firefox | Mozilla | 3.5.12 (including) | 3.5.12 (including) |
| Firefox | Mozilla | 3.5.13 (including) | 3.5.13 (including) |
| Firefox | Mozilla | 3.5.14 (including) | 3.5.14 (including) |
| Firefox | Mozilla | 3.5.15 (including) | 3.5.15 (including) |
| Firefox | Mozilla | 3.5.16 (including) | 3.5.16 (including) |
| Firefox | Mozilla | 3.5.17 (including) | 3.5.17 (including) |
| Firefox | Mozilla | 3.5.18 (including) | 3.5.18 (including) |
| Firefox | Mozilla | 3.5.19 (including) | 3.5.19 (including) |
| Firefox | Mozilla | 3.6 (including) | 3.6 (including) |
| Firefox | Mozilla | 3.6.2 (including) | 3.6.2 (including) |
| Firefox | Mozilla | 3.6.3 (including) | 3.6.3 (including) |
| Firefox | Mozilla | 3.6.4 (including) | 3.6.4 (including) |
| Firefox | Mozilla | 3.6.6 (including) | 3.6.6 (including) |
| Firefox | Mozilla | 3.6.7 (including) | 3.6.7 (including) |
| Firefox | Mozilla | 3.6.8 (including) | 3.6.8 (including) |
| Firefox | Mozilla | 3.6.9 (including) | 3.6.9 (including) |
| Firefox | Mozilla | 3.6.10 (including) | 3.6.10 (including) |
| Firefox | Mozilla | 3.6.11 (including) | 3.6.11 (including) |
| Firefox | Mozilla | 3.6.12 (including) | 3.6.12 (including) |
| Firefox | Mozilla | 3.6.13 (including) | 3.6.13 (including) |
| Firefox | Mozilla | 3.6.14 (including) | 3.6.14 (including) |
| Firefox | Mozilla | 3.6.15 (including) | 3.6.15 (including) |
| Firefox | Mozilla | 3.6.16 (including) | 3.6.16 (including) |
| Firefox | Mozilla | 3.6.17 (including) | 3.6.17 (including) |
| Firefox | Mozilla | 4.0 (including) | 4.0 (including) |
| Firefox | Mozilla | 4.0-beta1 (including) | 4.0-beta1 (including) |
| Firefox | Mozilla | 4.0-beta10 (including) | 4.0-beta10 (including) |
| Firefox | Mozilla | 4.0-beta11 (including) | 4.0-beta11 (including) |
| Firefox | Mozilla | 4.0-beta12 (including) | 4.0-beta12 (including) |
| Firefox | Mozilla | 4.0-beta2 (including) | 4.0-beta2 (including) |
| Firefox | Mozilla | 4.0-beta3 (including) | 4.0-beta3 (including) |
| Firefox | Mozilla | 4.0-beta4 (including) | 4.0-beta4 (including) |
| Firefox | Mozilla | 4.0-beta5 (including) | 4.0-beta5 (including) |
| Firefox | Mozilla | 4.0-beta6 (including) | 4.0-beta6 (including) |
| Firefox | Mozilla | 4.0-beta7 (including) | 4.0-beta7 (including) |
| Firefox | Mozilla | 4.0-beta8 (including) | 4.0-beta8 (including) |
| Firefox | Mozilla | 4.0-beta9 (including) | 4.0-beta9 (including) |