The host is installed with Mozilla Firefox and is prone to security bypass vulnerability.

Successful exploitation allows remote attackers to trigger an installation dialog for a add-on or theme. Impact Level: Application

Upgrade to Firefox version 5.0 or later http://www.mozilla.com/en-US/firefox/all.html

The flaw is due to firefox does not properly enforce the whitelist for the xpinstall functionality, which allows a non-whitelisted site to trigger an install dialog for add-ons and themes.

Mozilla Firefox versions before 5.0.

• http://www.mozilla.org/security/announce/2011/mfsa2011-28.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=645699

---

Updated on 2015-03-25