CVE-2005-3433

CVE-2005-3433 affects Mirabilis ICQ 2003a. The vulnerability is a buffer overflow in the First Name and Last Name fields, caused by processing long user-provided strings, which can lead to arbitrary code execution when a user is manipulated to enter such strings. The documents specify user-assist...

Mirabilis ICQ 2003a - Remote Buffer Overflow Download Shellcode

/ Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan and delicon / / Usage: Execute exploit, it will create "bof.txt" in current...

LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1

LogicLibrary BugScan Vulnerability Summary Report VSR Trillian 2.0, 3.0 and 3.1 3/23/2005 I. Background This report is based on the example in Guidelines for Security Vulnerability Reporting and Response, provided by the Organization for Internet Safety OIS. The template for this document can b...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

Exploit for unknown platform in category local exploits =================================================== ICQ Pro 2003a Password Bypass exploit ca1-icq.asm =================================================== ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ;...

ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass

; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...

ICQ Pro 2003a - ca1-icq.asm Password Bypass

ICQ Pro 2003a - ca1-icq.asm Password Bypass ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This explo...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

No description provided by source. ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows...

ICQ 2003a Password Bypass

Software: ICQ 2003a Threat: Login password can be bypassed locally I have found a vulnerability in ICQ Pro 2003a that allows anyone to connect to ICQ server using any account registered locally regardless the 'save password' option is checked or not. High level security password is also bypassed!...

ICQ 2003a protection bypass

By making Contact List windos active via Windows API it's possible to access contact list without password...

CVE-2003-0365

ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs...

CVE-2003-0365

ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0237

CVE-2003-0237 affects Mirabilis ICQ Pro 2003a via the ICQ Features on Demand spoofing vulnerability. The hard-coded DataURL for downloaded features in Packages.ini is not authenticated, allowing an attacker to impersonate the package repository and install malicious software, potentially enabling...

CVE-2003-0238

CVE-2003-0238 impacts Mirabilis ICQ Pro 2003a and earlier. The flaw resides in ICQ’s Message Session HTML rendering library used by the ADS/advertising component. By spoofing the ADS server and sending malformed HTML, an attacker can trigger a denial-of-service condition, consuming CPU and freezi...

CVE-2003-0236

CVE-2003-0236 concerns Mirabilis ICQ Pro 2003a’s integrated POP3 client (POP3.dll COM object). The vulnerability is a 16‑bit signed overflow in the Subject and Date headers (Subject/Date fields) of e‑mail messages, allowing an attacker to craft headers that can execute arbitrary commands on a vul...

CVE-2003-0239

CVE-2003-0239 concerns the GIF89a parsing/rendering library in Mirabilis ICQ Pro 2003a (icqateimg32.dll). Affected: ICQ Pro 2003a and earlier. Issue: input validation error when parsing GIF headers that lack a Global Color Table (GCT) or Local Color Table (LCT) after an Image Descriptor, enabling...