FKIE_CVE-2006-4662

Vulnerability from fkie_nvd - Published: 2006-09-09 00:04 - Updated: 2026-06-16 22:29
Severity
Summary
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
References
cve@mitre.orghttp://secunia.com/advisories/21834
cve@mitre.orghttp://securityreason.com/securityalert/1530
cve@mitre.orghttp://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509Patch, Vendor Advisory
cve@mitre.orghttp://www.kb.cert.org/vuls/id/400780US Government Resource
cve@mitre.orghttp://www.securityfocus.com/archive/1/445513/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/19897Patch
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/3527
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/28835
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21834
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/1530
af854a3a-2127-422b-91ae-364da2661108http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/400780US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/445513/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19897Patch
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3527
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/28835
Impacted products
Vendor Product Version
mirabilis icq 0.99b_1.1.1.1
mirabilis icq 0.99b_v.3.19
mirabilis icq 98.0a
mirabilis icq 99a_2.15build1701
mirabilis icq 99a_2.21build1800
mirabilis icq 2000.0a
mirabilis icq 2000.0b_build3278
mirabilis icq 2001a
mirabilis icq 2001b_build3636
mirabilis icq 2001b_build3638
mirabilis icq 2001b_build3659
mirabilis icq 2002a_build3722
mirabilis icq 2002a_build3727
mirabilis icq 2003a
mirabilis icq 2003a_build3777
mirabilis icq 2003a_build3799
mirabilis icq 2003a_build3800
mirabilis icq 2003b
mirabilis icq 2003b_build3096
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:0.99b_1.1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55BF15F6-FFF7-4A0D-A2FF-8160AB3D70C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:0.99b_v.3.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A5D8068-55DF-4008-98CC-4ABEED68260D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:98.0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2CBBD4E-4E3D-4441-88B0-24A6566CCB93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:99a_2.15build1701:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9CB6B89-E3B1-4096-AF07-C9E74BFCABDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:99a_2.21build1800:*:*:*:*:*:*:*",
              "matchCriteriaId": "7181BF12-E9B6-4F8E-B1D0-3251007389D8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C7B95B0-8CCB-4561-B354-80925B9769D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C1E49E4-1BB4-40BF-AB6F-829ACAEDC581",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BEA5FE1-267D-41B3-AA41-794DA021C4A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2001b_build3636:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10F3133-2D77-4A16-9F16-766EB4B3C5DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2001b_build3638:*:*:*:*:*:*:*",
              "matchCriteriaId": "E03F3686-071C-48E4-ABDD-BF68162CDC20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2001b_build3659:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC70672D-FE67-42C2-83D2-D1E554BF2C8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2002a_build3722:*:*:*:*:*:*:*",
              "matchCriteriaId": "28ABA292-10F6-447A-9494-CA716B9F47FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2002a_build3727:*:*:*:*:*:*:*",
              "matchCriteriaId": "0228FD42-8E98-472C-9C8A-D8396DF4E30E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003a:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E4B06D-8C2B-499A-A3B4-B1B9660AC4F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003a_build3777:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1884958-DBAB-4999-9EBF-96D363FF26D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003a_build3799:*:*:*:*:*:*:*",
              "matchCriteriaId": "74A65FB3-ECB5-45EF-9B53-9F55E55B2DA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003a_build3800:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F0A9C10-A685-4D02-A9FF-6689441AF598",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003b:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFA30DD6-C47C-495A-9BFE-B9989168090E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mirabilis:icq:2003b_build3096:*:pro:*:*:*:*:*",
              "matchCriteriaId": "CA7C3EB4-21B6-42FE-B94F-C0089B277196",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en mont\u00f3n en la funci\u00f3n MCRegEx__Search en AOL ICQ Pro 2003b Build 3916 y anteriores permiten a un atacanet remoto ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un campo grnde inconsistente de un mensaje en un tipo 0x2711 Type-Length-Value (TLV)."
    }
  ],
  "id": "CVE-2006-4662",
  "lastModified": "2026-06-16T22:29:32.800",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-09-09T00:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/21834"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/1530"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.coresecurity.com/index.php5?module=ContentMod\u0026action=item\u0026id=1509"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/400780"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/445513/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/19897"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/3527"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28835"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21834"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/1530"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.coresecurity.com/index.php5?module=ContentMod\u0026action=item\u0026id=1509"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/400780"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/445513/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/19897"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/3527"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28835"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.