EUVD-2003-0233

Malware in sbrugna...

EUVD-2003-0230

Malware in sbrugna...

EUVD-2003-0232

Malware in sbrugna...

EUVD-2003-0234

Malware in sbrugna...

EUVD-2003-0231

Malware in sbrugna...

AOL ICQ Pro fails to properly handle incoming message lengths

Overview A buffer overflow vulnerability in ICQ may allow a remote attacker to execute arbitrary code or create a denial-of-service condition. Description ICQ is a instant messaging application that is maintained by AOL. A buffer overflow vulnerability in ICQ Pro 2003b may allow a remote,...

CVE-2006-4662

Heap-based buffer overflow in the MCRegExSearch function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value TLV type...

CVE-2006-4662

CVE-2006-4662 describes a heap-based overflow in AOL ICQ Pro 2003b (Build 3916 and earlier) triggered in MCRegEx__Search by an inconsistent 0x2711 TLV length field in a message. The overflow occurs when a length value is used to memset a heap buffer, enabling remote code execution. Affected produ...

CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ AOL ICQ Pro 2003b heap overflow vulnerability Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0321 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: AOL ICQ Pr...

: AOL ICQ Pro 2003b heap overflow vulnerability

Date Published : 2006-09-07 Last Update : 2006-09-06 Advisory ID : CORE-2006-0321 Bugtraq ID : 19897 CVE Name : CVE-2006-4662 Title : AOL ICQ Pro 2003b heap overflow vulnerability Class : Boundary Error Condition Remotely Exploitable : Yes Locally Exploitable : Yes Advisory URL :...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

Exploit for unknown platform in category local exploits =================================================== ICQ Pro 2003a Password Bypass exploit ca1-icq.asm =================================================== ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ;...

ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass

; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...

ICQ Pro 2003a - ca1-icq.asm Password Bypass

ICQ Pro 2003a - ca1-icq.asm Password Bypass ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This explo...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

No description provided by source. ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows...

ICQ 2003a Password Bypass

Software: ICQ 2003a Threat: Login password can be bypassed locally I have found a vulnerability in ICQ Pro 2003a that allows anyone to connect to ICQ server using any account registered locally regardless the 'save password' option is checked or not. High level security password is also bypassed!...

CVE-2003-0239

icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...

CVE-2003-0237

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack...

CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0238

The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service CPU consumption by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...