PT-2006-5446 · Aol+1 · Aol Icq Toolbar+1

Ezequiel Gutesman + 4 · Publicado 2006-09-09 · Atualizado 2018-10-17 · CVE-2006-4661

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AOL ICQ Toolbar version 1.3 for Internet Explorer

Description The issue arises from improper validation of the origin of the configuration web page, specifically options2.html, which can be exploited by remote attackers to trick users into reconfiguring the toolbar by presenting disguised checkboxes.

Recommendations For AOL ICQ Toolbar version 1.3, consider restricting access to the configuration web page options2.html until a proper fix is applied to prevent reconfiguration by disguised checkboxes.

Correção

Identificadores relacionados

CVE-2006-4661

Produtos afetados

Aol Icq Toolbar

Internet Explorer

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28814 · Nota
• http://securityfocus.com/bid/19900 · Nota
• http://securityreason.com/securityalert/1523 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4661 · Nota de Segurança
• http://securityfocus.com/archive/1/445515/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/3528 · Nota
• http://secunia.com/advisories/21809 · Nota
• http://coresecurity.com/index.php5?module=ContentMod&action=item&id=1510 · Aviso do Fabricante