CVE-2006-6506 — Exposure of Private Personal Information to an Unauthorized Actor in Mozilla Firefox
4 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
3.2%
top 13.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 20
Latest updateMay 1
Description
The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits.
CVSS vector
AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9