CVE-2006-6585
Severity Score
6.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
El manejador de extensiones de Mozilla Firefox 2.0 no rellena correctamente la lista de extensiones locales, lo caul permite a atacantes remotos construir una extensión que
eso se oculta encontrando su nombre en la lista y después llamando RemoveElement, según lo demostrado por la extensión de FFsniFF.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-12-15 CVE Reserved
- 2006-12-15 CVE Published
- 2024-05-09 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://azurit.elbiahosting.sk/ffsniff/ffsniff-0.2.tar.gz | X_refsource_misc | |
| http://securityreason.com/securityalert/2046 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/454058/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/493585/100/0/threaded | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mozilla Search vendor "Mozilla" | Firefox Search vendor "Mozilla" for product "Firefox" | 2.0 Search vendor "Mozilla" for product "Firefox" and version "2.0" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Firefox Search vendor "Mozilla" for product "Firefox" | 3.0 Search vendor "Mozilla" for product "Firefox" and version "3.0" | - |
Affected
| ||||||