VULNERABILITY INTELLIGENCE

CVE-2006-5650

CVSS score7.5 HIGH
EPSS probability67.20%
CISA KEVNot currently listed
Published2006-11-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.

Primary references