Описание
AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar.
AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-4661
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28814
- http://secunia.com/advisories/21809
- http://securityreason.com/securityalert/1523
- http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510
- http://www.securityfocus.com/archive/1/445515/100/0/threaded
- http://www.securityfocus.com/bid/19900
- http://www.vupen.com/english/advisories/2006/3528
EPSS
CVE ID
Связанные уязвимости
AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web page (options2.html), which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar.
EPSS