Lucene search

K
cve[email protected]CVE-2013-5611
HistoryDec 11, 2013 - 3:55 p.m.

CVE-2013-5611

2013-12-1115:55:00
NVD-CWE-noinfo
web.nvd.nist.gov
28
mozilla
firefox
cve-2013-5611
vulnerability
doorhanger
spoofing
nvd
security
web app

8.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%

Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.

8.9 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%