PT-2006-5446 · Aol+1 · Aol Icq Toolbar+1

Ezequiel Gutesman + 4 · Published 2006-09-09 · Updated 2018-10-17 · CVE-2006-4661

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AOL ICQ Toolbar version 1.3 for Internet Explorer

Description The issue arises from improper validation of the origin of the configuration web page, specifically options2.html, which can be exploited by remote attackers to trick users into reconfiguring the toolbar by presenting disguised checkboxes.

Recommendations For AOL ICQ Toolbar version 1.3, consider restricting access to the configuration web page options2.html until a proper fix is applied to prevent reconfiguration by disguised checkboxes.

Fix

Related Identifiers

CVE-2006-4661

Affected Products

Aol Icq Toolbar

Internet Explorer

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-4661 · Security Note
• http://coresecurity.com/index.php5?module=ContentMod&action=item&id=1510 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28814 · Note
• http://securityfocus.com/bid/19900 · Note
• http://securityreason.com/securityalert/1523 · Note
• http://securityfocus.com/archive/1/445515/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/3528 · Note
• http://secunia.com/advisories/21809 · Note