CVE-2006-5650

The CVE-2006-5650 vulnerability affects AOL ICQ 5.1 via the ICQPhone.SipxPhoneManager ActiveX control. The flaw resides in the DownloadAgent function, which downloads a file from a given URL and executes it, enabling a remote attacker to run arbitrary code on the victim’s system (in the context o...

CVE-2007-1904

CVE-2007-1904 describes a directory-traversal vulnerability in AOL Instant Messenger (AIM) ≤ 5.9 and ICQ ≤ 5.1 (likely earlier) that allows user-assisted remote attackers to write files to arbitrary locations by supplying a filename containing .. in a file transfer operation. The core issue is im...