CVE-2006-4662

Name of the Vulnerable Software and Affected Versions AOL ICQ Pro version 2003b Build 3916 and earlier

Description The issue is related to a heap-based buffer overflow in the MCRegEx Search function. This allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

Recommendations For AOL ICQ Pro version 2003b Build 3916 and earlier, consider disabling the MCRegEx Search function as a temporary workaround until a patch is available. Restrict access to the function to minimize the risk of exploitation.