CVE-2006-6506: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits.

Affected products

• Mozilla Firefox: version 2.0 only

Published 2006-12-20. Last modified 2026-06-16.