CVE-2006-2303: Mirabilis Icq

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object.

Affected products

• Mirabilis Icq: version 5.04_build2321 only

Published 2006-05-11. Last modified 2026-06-16.