Description
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
References
- 20060907 CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability mailing-list
- http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1509
- 1530 third-party-advisory
- ADV-2006-3527 vdb-entry
- 21834 third-party-advisory
- VU#400780 third-party-advisory
- icqpro-mcregexsearch-bo(28835) vdb-entry
- 19897 vdb-entry