CVE-2006-0766 Security feature bypass in n/a

What is CVE-2006-0766?

CVE-2006-0766 is a medium-severity vulnerability in n/a, published on 18 Feb 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly containing other modified properties such as company name, icon, and description, which could trick a user into executing arbitrary programs.

Which versions are affected by CVE-2006-0766?

It affects 2 products.

Products include Mirabilis Icq, Mirabilis Icq Lite.

How do I fix CVE-2006-0766?

No fix has been published for CVE-2006-0766 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-0766 being exploited?

There is no known exploitation of CVE-2006-0766 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2002-2329 Denial of service in n/a High 7.8
• CVE-2006-4662 Memory corruption in n/a High 7.5
• CVE-2003-0235 Memory corruption in n/a High 7.5
• CVE-2003-0236 Integer overflow in n/a High 7.5
• CVE-2003-0237 Supply chain in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-72w6-jr6g-jmgh.