CVE-2006-5650

CVE-2006-5650 describes a critical remote code execution vulnerability affecting America Online ICQ 5.1. Specifically, the ICQPhone.SipxPhoneManager ActiveX control's DownloadAgent function can be abused by remote attackers to download and execute arbitrary code, as demonstrated through an ICQ avatar. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, exploit intelligence confirms the existence of Metasploit modules and ExploitDB entries, indicating readily available exploit code and a high likelihood of exploitation, despite a lack of recent community discussion or media coverage.