Justin Dolske

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.2 **Description** The issue arises from the asynchronous Authorization Prompt implementation in the password manager component, which fails to properly handle concurrent authorization requests from multiple websites. This could potentially allow remote web servers to spoof an authorization dialog, enabling them to capture user credentials by demanding HTTP authentication under certain circumstances. **Recommendations** For versions prior to 3.6.2, update to version 3.6.2 or later to resolve the issue.