KLA10427 ACE vulnerability in ICQ

Insecure updates were found in ICQ 7. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely by spoofing the update server.

Original advisories

SecurityFocus

xforce

Related products

ICQ

CVE list

CVE-2011-0487 critical

Solution

Update to latest version

ICQ

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• ICQ 7 versions earlier than 7.4.4629