You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2013-105

Mozilla Foundation Security Advisory 2013-105

Title: Application Installation doorhanger persists on navigation
Impact: Moderate
Announced: December 10, 2013
Reporter: Myk Melez
Products: Firefox

Fixed in: Firefox 26

Description

Mozilla developer Myk Melez reported that with specifically timed page navigation, the doorhanger notification for Web App installation could persist from one site to another without being dismissed by the navigation. This could be used by a malicious site to trick a user into installing an application from one site while making it appear to come from another.

References