CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2006-0766

First published: Sat Feb 18 2006(Updated: )

ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly containing other modified properties such as company name, icon, and description, which could trick a user into executing arbitrary programs.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
CenterICQ=2003b
CenterICQ=2003a
Miranda IM=4.0
Miranda IM=4.1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2006-0766?

    CVE-2006-0766 is classified as a medium severity vulnerability due to its potential to allow user-assisted remote attacks.

  • How do I fix CVE-2006-0766?

    To fix CVE-2006-0766, ensure that your ICQ software is updated to the latest version that addresses this vulnerability.

  • Which versions of ICQ are affected by CVE-2006-0766?

    CVE-2006-0766 affects ICQ versions 2003a, 2003b, and Lite versions 4.0 and 4.1.

  • What type of attack is associated with CVE-2006-0766?

    CVE-2006-0766 is associated with user-assisted remote attacks that exploit file extension manipulation.

  • What impact does CVE-2006-0766 have on users?

    The impact of CVE-2006-0766 can lead to users unintentionally executing malicious files that seem safe.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203