Vulnerabilities > CVE-2006-4662 - Remote Heap Buffer Overflow vulnerability in ICQ MCRegEx__Search

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

mirabilis

NVD

Published: 2006-09-09

Updated: 2018-10-17

Summary

Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

Vulnerable Configurations

Part	Description	Count
Application	Mirabilis Mirabilis ICQ 0.99B_1.1.1.1 Mirabilis ICQ 0.99B_V.3.19 Mirabilis ICQ 98.0A Mirabilis ICQ 99A_2.15Build1701 Mirabilis ICQ 99A_2.21Build1800 Mirabilis ICQ 2000.0A Mirabilis ICQ 2000.0B_Build3278 Mirabilis ICQ 2001A Mirabilis ICQ 2001B_Build3636 Mirabilis ICQ 2001B_Build3638 Mirabilis ICQ 2001B_Build3659 Mirabilis ICQ 2002A_Build3722 Mirabilis ICQ 2002A_Build3727 Mirabilis ICQ 2003A Mirabilis ICQ 2003A_Build3777 Mirabilis ICQ 2003A_Build3799 Mirabilis ICQ 2003A_Build3800 Mirabilis ICQ 2003B Mirabilis ICQ 2003B_Build3096	19

Summary

Vulnerable Configurations

References