Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Solaris | Oracle | 11.3 (including) | 11.3 (including) |
Firefox | Ubuntu | lucid | * |
Firefox | Ubuntu | precise | * |
Firefox | Ubuntu | quantal | * |
Firefox | Ubuntu | raring | * |
Firefox | Ubuntu | saucy | * |
Firefox | Ubuntu | upstream | * |