CVE-2006-4662

HIGH 7.5CVE-2006-4662 · Published 09/09/2006 · updated 16/06/2026

In short

CVE-2006-4662 is a HIGH (CVSS 7.5) vulnerability affecting icq (mirabilis).
Chance of exploitation in the next 30 days (EPSS): 6.3%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
icq mirabilis	`= 0.99b_1.1.1.1= 0.99b_v.3.19= 2000.0a= 2000.0b_build3278= 2001a= 2001b_build3636= 2001b_build3638= 2001b_build3659= 2002a_build3722= 2002a_build3727= 2003a= 2003a_build3777= 2003a_build3799= 2003a_build3800= 2003b= 2003b_build3096= 98.0a= 99a_2.15build1701= 99a_2.21build1800`	No fix yet

Description

Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

References

secunia.com/advisories/21834
securityreason.com/securityalert/1530
coresecurity.com/index.php5 · Patch
kb.cert.org/vuls/id/400780 · US Government Resource
securityfocus.com/archive/1/445513/100/0/threaded
securityfocus.com/bid/19897 · Patch
vupen.com/english/advisories/2006/3527
exchange.xforce.ibmcloud.com/vulnerabilities/28835

More vulnerabilities in icq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

icq

mirabilis

= 0.99b_1.1.1.1= 0.99b_v.3.19= 2000.0a= 2000.0b_build3278= 2001a= 2001b_build3636= 2001b_build3638= 2001b_build3659= 2002a_build3722= 2002a_build3727= 2003a= 2003a_build3777= 2003a_build3799= 2003a_build3800= 2003b= 2003b_build3096= 98.0a= 99a_2.15build1701= 99a_2.21build1800

No fix yet

More vulnerabilities in icq

See all →