NVD

Id
65129  
Name
CVE-2006-6585  
Description
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-15  
Modified Date
2010-11-15  
Seq
2006-6585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340071 65129 CVE-2006-6585 http://azurit.elbiahosting.sk/ffsniff/ffsniff-0.2.tar.gz  View
340072 65129 CVE-2006-6585 2046  View
340073 65129 CVE-2006-6585 20061210 Firefox 2.0 security bug: Extensions can hide themself  View
340074 65129 CVE-2006-6585 20080623 Firefox 3.0 security bug: Extensions can STILL hide themselves  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60314 JVNDB-2006-002580 Mozilla Firefox の拡張マネージャにおける自身を非表示にする拡張を構成される脆弱性 Mozilla Firefox の拡張マネージャは、ローカルの拡張のリストを適切に設定しないため、自身を非表示にする拡張を構成される脆弱性が存在します。 CVE-2006-6585 22687 CVE-2006-6585 65129 6.4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002580.html 2006-12-15 2012-09-25 View