CVE-2013-0798

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 20.0 on Android

Description The issue allows attackers to modify add-ons before installation by leveraging the time window during which the app tmp directory is used, due to world-writable and world-readable permissions for the app tmp installation directory in the local filesystem.

Recommendations For versions prior to 20.0 on Android, update to version 20.0 or later to resolve the issue.