{"action":"Upgrade firefox-esr to 45.0esr-1 or later.","affected":[{"fixed":"45.0esr-1","introduced":"0"}],"component":"firefox-esr","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["45.0esr-1"],"id":"tcs_01M5N8Q56GCE9YM3QBWK88FB12","modified_at":"2026-10-22T23:47:24.111131355Z","published_at":"2006-12-15T19:28:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-6585","https://security-tracker.debian.org/tracker/CVE-2006-6585"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-6585#Debian:14/firefox-esr","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-6585"}],"summary":"The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the lis"}