CVE-2006-6585
Description
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.
Risk Information
Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.459
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities affected in Mozilla Firefox (x64) 3.0 | Windows |
| Multiple vulnerabilities affected in Mozilla_Firefox 3.0 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 3.0 | Windows |
| Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 2.0 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 2.0 | Windows |
| Multiple Vulnerabilities are affected in Mozilla_Firefox 3.0 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-343016 | Mozilla Firefox (x64) (132.0.2) |
| PATCH-343015 | Mozilla Firefox (132.0.2) |
| PATCH-343016 | Mozilla Firefox (x64) (132.0.2) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234