PT-2006-5445 · Aol · Aol Icq Toolbar

Ezequiel Gutesman + 4 · Published 2006-09-09 · Updated 2018-10-17 · CVE-2006-4660

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions AOL ICQ Toolbar version 1.3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module. These vulnerabilities allow remote attackers to execute arbitrary web script or HTML within the Feeds interface context. The attack can be carried out via the title and description elements within an item element in an RSS feed.

Recommendations For AOL ICQ Toolbar version 1.3, as a temporary workaround, consider disabling the RSS Feed module until a patch is available. Restrict access to the Feeds interface to minimize the risk of exploitation. Avoid using the title and description elements within RSS feeds in the affected module until the issue is resolved.

Fix

Related Identifiers

CVE-2006-4660

Affected Products

Aol Icq Toolbar

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-4660 · Security Note
• http://coresecurity.com/index.php5?module=ContentMod&action=item&id=1510 · Vendor Advisory
• http://securityfocus.com/bid/19900 · Note
• http://securityreason.com/securityalert/1523 · Note
• http://securityfocus.com/archive/1/445515/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/3528 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28809 · Note
• http://secunia.com/advisories/21809 · Note