CVE-2006-4662 - CVE House
Back to Database
Status published High CVE-2006-4662

Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ...

Vulnerability Description

Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4662

Credits & Attribution

No credits recorded in the NVD database.

References

More from mirabilis

View All →
CVE-2006-5724
Heap-based buffer overflow the "Answering Service" function in ICQ 2003b...
Low 2.1
CVE-2006-2303
Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321...
Medium 6.4
CVE-2006-0766
ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite...
Medium 5.1
CVE-2006-0765
GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ...
Medium 5.1
CVE-2005-3433
Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to...
Medium 5.1

Affected Vendor

Affected Software

icq
Vulnerable Versions:
0.99b_1.1.1.1, 0.99b_v.3.19, 98.0a, 99a_2.15build1701, 99a_2.21build1800, 2000.0a, 2000.0b_build3278, 2001a, 2001b_build3636, 2001b_build3638, 2001b_build3659, 2002a_build3722, 2002a_build3727, 2003a, 2003a_build3777, 2003a_build3799, 2003a_build3800, 2003b, 2003b_build3096

Timeline

Official Publish: September 9th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.