7.5

CVE-2006-4662

Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mirabilis ≫ Icq Version0.99b_1.1.1.1
Mirabilis ≫ Icq Version0.99b_v.3.19
Mirabilis ≫ Icq Version98.0a
Mirabilis ≫ Icq Version99a_2.15build1701
Mirabilis ≫ Icq Version99a_2.21build1800
Mirabilis ≫ Icq Version2000.0a
Mirabilis ≫ Icq Version2000.0b_build3278
Mirabilis ≫ Icq Version2001a
Mirabilis ≫ Icq Version2001b_build3636
Mirabilis ≫ Icq Version2001b_build3638
Mirabilis ≫ Icq Version2001b_build3659
Mirabilis ≫ Icq Version2002a_build3722
Mirabilis ≫ Icq Version2002a_build3727
Mirabilis ≫ Icq Version2003a
Mirabilis ≫ Icq Version2003a_build3777
Mirabilis ≫ Icq Version2003a_build3799
Mirabilis ≫ Icq Version2003a_build3800
Mirabilis ≫ Icq Version2003b
Mirabilis ≫ Icq Version2003b_build3096 Editionpro
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.15% 0.926
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21834
http://securityreason.com/securityalert/1530
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/400780
US Government Resource
http://www.securityfocus.com/archive/1/445513/100/0/threaded
http://www.securityfocus.com/bid/19897
Patch
http://www.vupen.com/english/advisories/2006/3527
https://exchange.xforce.ibmcloud.com/vulnerabilities/28835