CVEvulnerability
CVE-2006-5650
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.
Affected configurations
• aol icq 5.1
References
- http://secunia.com/advisories/22670 Vendor Advisory
- http://securityreason.com/securityalert/1830 securityreason.com
- http://securitytracker.com/id?1017163 securitytracker.com
- http://www.securityfocus.com/archive/1/450726/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20930 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4362 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-037.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30059 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22670 Vendor Advisory
- http://securityreason.com/securityalert/1830 securityreason.com
- http://securitytracker.com/id?1017163 securitytracker.com
- http://www.securityfocus.com/archive/1/450726/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20930 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4362 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-037.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30059 exchange.xforce.ibmcloud.com