Denial Of Service (DoS)

firefox and thunderbird are vulnerable to Denial of Service (DoS) attacks. This vulnerability occurs due to a missing activation delay on the error page for sites with invalid TLS certificates. An attacker can exploit this vulnerability by creating a malicious website that contains a crafted iframe. When a victim visits the malicious website, the iframe will be displayed on top of the Firefox error page. If the victim clicks on a button in the iframe, the click will be redirected to the malicious website, even though the error page is still visible. This can be used to trick the victim into performing actions that they would not otherwise do.