ID CVE-2006-6506
Summary The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits.
References
Vulnerable Configurations
  • cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 08-03-2011 - 02:46)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:N/A:N
refmap via4
bid 21668
cert TA06-354A
confirm http://www.mozilla.org/security/announce/2006/mfsa2006-75.html
gentoo GLSA-200701-02
hp
  • HPSBUX02153
  • SSRT061181
misc http://www.legroom.net/modules.php?op=modload&name=News&file=article&sid=215
sectrack 1017421
secunia
  • 23282
  • 23545
  • 23589
  • 23614
  • 23672
suse
  • SUSE-SA:2006:080
  • SUSE-SA:2007:006
ubuntu USN-398-1
vupen
  • ADV-2006-5068
  • ADV-2008-0083
Last major update 08-03-2011 - 02:46
Published 20-12-2006 - 01:28
Back to Top