Description
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
America Online ICQ ActiveX Control Arbitrary File Download and Execute
exploit/windows/browser/aol_icq_downloadagent
Exploit-DB 2
- America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit) EDB-16554 · remote · Nov 24, 2010 · verified
- America Online ICQ 5.1 - ActiveX Control Remote Code Execution EDB-28916 · remote · Nov 6, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- aol-icq-code-execution(30059) vdb-entry
- 1830 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-037.html
- 1017163 vdb-entry
- ADV-2006-4362 vdb-entry
- 20061106 ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability mailing-list
- 22670 third-party-advisory
- 20930 vdb-entry