Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown

CVE-2006-4662

Disclosure Date: September 09, 2006 (last updated October 04, 2023)
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
0
0
Attacker Value
Unknown

CVE-2003-0235

Disclosure Date: May 27, 2003 (last updated February 22, 2025)
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
0
0
Attacker Value
Unknown

CVE-2003-0238

Disclosure Date: May 27, 2003 (last updated February 22, 2025)
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
0
0
Attacker Value
Unknown

CVE-2003-0237

Disclosure Date: May 27, 2003 (last updated February 22, 2025)
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
0
0
Attacker Value
Unknown

CVE-2003-0236

Disclosure Date: May 27, 2003 (last updated February 22, 2025)
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
0
0
Attacker Value
Unknown

CVE-2003-0239

Disclosure Date: May 27, 2003 (last updated February 22, 2025)
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
0
0
Attacker Value
Unknown

CVE-2002-0028

Disclosure Date: February 27, 2002 (last updated February 22, 2025)
Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.
0
0
Attacker Value
Unknown

CVE-2001-1305

Disclosure Date: August 17, 2001 (last updated February 22, 2025)
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
0
0
Attacker Value
Unknown

CVE-2000-0564

Disclosure Date: May 29, 2000 (last updated February 22, 2025)
The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.
0
0