ICQ Toolbar 1.3 Remote Config & RSS Injection Vulnerability (CORE-2006-0322)

Critical Vulnerability Information Vulnerability Title Multiple vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Release Date 2006-09-07 Last Updated 2006-09-06 Vulnerability ID CORE-2006-0322 Security Risk Level Medium Vulnerability Description Remote Configuration Vulnerability: - Attackers can alter ICQ Toolbar configuration settings by controlling malicious websites. - Attackers can inject malicious code into the user's browser. Malicious RSS Feed Vulnerability: - Attackers can inject script code via malicious RSS Feeds. - Attackers can execute script code by controlling these fields. Affected Software Packages ICQ Toolbar 1.3 for Internet Explorer Unaffected Software Packages ICQ Search Plugin for Mozilla / Firefox ICQ Toolbar 1.2 for Internet Explorer Solutions and Workarounds Users should carefully verify the source of any web-based configuration files used to configure ICQ Toolbar. It is recommended to use ICQ Toolbar 1.2, which does not include RSS Feed functionality. Discoverers Luciana Tabo, Lucas Lavarello, Sebastian Cufre, Ezequiel Gutesman, and Javier Garcia Di Palma Technical Description Detailed explanation of how attackers can exploit vulnerabilities in the configuration interface and RSS Feed module to perform malicious actions. Bypass Methods Users are advised to remove or disable ICQ Toolbar, uninstall the plugin via Windows Control Panel, or rename the file in the installation directory.

Goal Reached Thanks to every supporter — we hit 100%!

ICQ Toolbar 1.3 Remote Config & RSS Injection Vulnerability (CORE-2006-0322)