Lucene search

K
cve[email protected]CVE-2008-1120
HistoryMar 03, 2008 - 10:44 p.m.

CVE-2008-1120

2008-03-0322:44:00
CWE-134
web.nvd.nist.gov
22
cve-2008-1120
mirabilis icq
vulnerability
remote code execution
format string
html code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.8%

Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service (crash) via unspecified vectors related to HTML code generation.

Affected configurations

NVD
Node
icqmirabilis_icqMatch6build_6043
CPENameOperatorVersion
icq:mirabilis_icqicq mirabilis icqeq6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.8%

Related for CVE-2008-1120