Mozilla Firefox Action Prompt Delay Security Mechanism Bypass Vulnerability

Mozilla Firefox Action Prompt Delay Security Mechanism Bypass Vulnerability

Mozilla Firefox is prone to a security-mechanism-bypass vulnerability because it fails to adequately prevent action prompt options from being selected before a delay timer has finished counting down.

Attackers can exploit this issue to initiate downloads or run files on a user's computer without their knowledge or consent. Successful attacks can allow arbitrary code to run with the privileges of the user running the application.

This issue is reportedly being tracked by Bugzilla Bug 376473.

Firefox 2.0.0.11 and prior versions are vulnerable.