Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox | Dec 10, 2025 | Dec 14, 2013 |
| Mfsa2013 105 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 26.0 | Dec 12, 2013 | Dec 10, 2013 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 11, 2013 |
| Suse | — | Upgrade firefox-pango-32bitUpgrade mozilla-xulrunner191Upgrade firefox-pcreUpgrade MozillaFirefox-branding-SLEDUpgrade libfreebl3Upgrade mozilla-nssUpgrade firefox-atkUpgrade libfreebl3-x86Upgrade sle-sdk-releaseUpgrade firefox-pcre-32bitUpgrade MozillaFirefox-develUpgrade firefox-freetype2Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade seamonkey-venkmanUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner191-translations-32bitUpgrade mozilla-xulrunner192-translations-32bitUpgrade libsoftokn3Upgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade firefox-glib2Upgrade firefox-libgcc_s1Upgrade firefox-fontconfig-32bitUpgrade firefox-cairoUpgrade libfreebl3-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-xulrunner191-translationsUpgrade firefox-atk-32bitUpgrade seamonkeyUpgrade seamonkey-translations-otherUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-nspr-develUpgrade mozilla-nss-x86Upgrade firefox-cairo-32bitUpgrade mozilla-xulrunner191-32bitUpgrade MozillaFirefoxUpgrade mozilla-xulrunner192-gnome-32bitUpgrade firefox-glib2-32bitUpgrade seamonkey-translations-commonUpgrade MozillaFirefox-translationsUpgrade seamonkey-ircUpgrade firefox-freetype2-32bitUpgrade libsoftokn3-32bitUpgrade firefox-pixman-32bitUpgrade firefox-libstdc++6Upgrade firefox-gtk2-32bitUpgrade mozilla-xulrunner192-translationsUpgrade firefox-pixmanUpgrade mozilla-xulrunner192-gnomeUpgrade firefox-libgcc_s1-32bitUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-x86Upgrade firefox-libstdc++6-32bitUpgrade mozilla-xulrunner192Upgrade firefox-fontconfigUpgrade mozilla-nss-toolsUpgrade seamonkey-dom-inspectorUpgrade firefox-pangoUpgrade mozilla-nsprUpgrade mozilla-xulrunner191-gnomevfsUpgrade firefox-gtk2Upgrade firefox-gtk2-langUpgrade mozilla-nspr-32bit | Feb 17, 2015 | Dec 11, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Dec 11, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub