CVE

Id
18407  
CVE No.
CVE-2006-2303  
Status
Candidate  
Description
Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
159688 18407 CVE-2006-2303 BUGTRAQ:20060509 ICQ Client Cross-Application Scripting (XAS)  View
159689 18407 CVE-2006-2303 URL:http://www.securityfocus.com/archive/1/archive/1/433360/100/0/threaded  View
159690 18407 CVE-2006-2303 FULLDISC:20060509 ICQ Client Cross-Application Scripting (XAS)  View
159691 18407 CVE-2006-2303 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045916.html  View
159692 18407 CVE-2006-2303 BID:17913  View
159693 18407 CVE-2006-2303 URL:http://www.securityfocus.com/bid/17913  View
159694 18407 CVE-2006-2303 VUPEN:ADV-2006-1765  View
159695 18407 CVE-2006-2303 URL:http://www.vupen.com/english/advisories/2006/1765  View
159696 18407 CVE-2006-2303 SECTRACK:1016045  View
159697 18407 CVE-2006-2303 URL:http://securitytracker.com/id?1016045  View
159698 18407 CVE-2006-2303 SECUNIA:20010  View
159699 18407 CVE-2006-2303 URL:http://secunia.com/advisories/20010  View
159700 18407 CVE-2006-2303 SREASON:868  View
159701 18407 CVE-2006-2303 URL:http://securityreason.com/securityalert/868  View
159702 18407 CVE-2006-2303 XF:icq-banner-xas(26386)  View

Related JVN