CVE-2006-5650
high · 7.5The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.
7.5
CVSS
66.6%
EPSS (exploit prob.)
99th
EPSS percentile
2006-11-07
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| aol | icq | 5.1 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/22670
- http://securityreason.com/securityalert/1830
- http://securitytracker.com/id?1017163
- http://www.securityfocus.com/archive/1/450726/100/0/threaded
- http://www.securityfocus.com/bid/20930
- http://www.vupen.com/english/advisories/2006/4362
- http://www.zerodayinitiative.com/advisories/ZDI-06-037.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30059
- http://secunia.com/advisories/22670
- http://securityreason.com/securityalert/1830
- http://securitytracker.com/id?1017163
- http://www.securityfocus.com/archive/1/450726/100/0/threaded
- http://www.securityfocus.com/bid/20930
- http://www.vupen.com/english/advisories/2006/4362
- http://www.zerodayinitiative.com/advisories/ZDI-06-037.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30059
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-5650