CVE-2006-4662

CVE-2006-4662 describes a heap-based overflow in AOL ICQ Pro 2003b (Build 3916 and earlier) triggered in MCRegEx__Search by an inconsistent 0x2711 TLV length field in a message. The overflow occurs when a length value is used to memset a heap buffer, enabling remote code execution. Affected produ...

CVE-2006-4662

Heap-based buffer overflow in the MCRegExSearch function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value TLV type...