CVE-2013-5611
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
Date published : 2013-12-11
http://www.mozilla.org/security/announce/2013/mfsa2013-105.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html