Description
AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar.
References
- http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510
- icq-toolbar-modify-settings(28814) vdb-entry
- ADV-2006-3528 vdb-entry
- 19900 vdb-entry
- 20060907 CORE-2006-0322: Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer mailing-list
- 21809 third-party-advisory
- 1523 third-party-advisory