Unscored CVE-2006-2303 EUVD-2006-2304GHSA-rhf8-hx5v-2m7m

Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web s…

Published May 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object.

References

ADV-2006-1765 vdb-entry
20060509 ICQ Client Cross-Application Scripting (XAS) mailing-list
17913 vdb-entry
1016045 vdb-entry
icq-banner-xas(26386) vdb-entry
868 third-party-advisory
20060509 ICQ Client Cross-Application Scripting (XAS) mailing-list
20010 third-party-advisory