CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
83.5%
nspluginwrapper before 1.4.4 does not properly provide access to
NPNVprivateModeBool variable settings, which could prevent Firefox plugins
from determining if they should run in Private Browsing mode and allow
remote attackers to bypass intended access restrictions, as demonstrated
using Flash.