What is the difference between a custom controller and controller extensions?

You can use custom controllers when you want your Visualforce page to run entirely in system mode, which does not enforce the permissions and field-level security of the current user while controller extension is an Apex class that extends the functionality of a standard or custom controller.