CVE-2006-4660
Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and…
Does this matter?
Lower severity and a low EPSS score (1.32%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 1.32% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- icq inc/icq toolbar
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21809
- http://securityreason.com/securityalert/1523
- http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510Vendor Advisory
- http://www.securityfocus.com/archive/1/445515/100/0/threaded
- http://www.securityfocus.com/bid/19900
- http://www.vupen.com/english/advisories/2006/3528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28809
- http://secunia.com/advisories/21809
- http://securityreason.com/securityalert/1523
- http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510Vendor Advisory
- http://www.securityfocus.com/archive/1/445515/100/0/threaded
- http://www.securityfocus.com/bid/19900
- http://www.vupen.com/english/advisories/2006/3528
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28809
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.