Report: Rustock Operators or Operator

A Krebsonsecurity piece looks into the unknown party behind the Rustock botnet, and whether it may have been operated by just one person. By interviewing investigators involved in the takedown, a joint operation carried out by Microsoft, FireEye, and various law enforcement agencies, Krebs...

[SECURITY] Fedora 15 Update: pidgin-2.7.11-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

SuSE 10 Security Update : pidgin, gaim and finch (ZYPP Patch Number 5573)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code. CVE-2008-2927 - overly long file names in MSN file transfers could crash pidgin. CVE-2008-2955 - SSL certifcates were not verfied. Therefore piding...

Fake AV Scareware Passively Served

A piece of fake anti-virus scareware, Antivirus 8, has been infecting computers via ICQ in recent days according to Roel Schouwenberg at Securelist. What makes this fake antivirus popup intriguing is that it appears infecting users who are not actively using their computer. While most fake...

ICQ 7 Instant Messaging Client Remote Code Execution Vulnerability

This host has ICQ installed and is prone remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbicqremotecodeexecvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ ICQ 7 Instant Messaging Client Remote Code Execution Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbo...

ICQ 7 Instant Messaging Client RCE Vulnerability

ICQ is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ICQ自动更新远程代码执行漏洞

BUGTRAQ ID: 45805 ICQ是一款流行的即时通讯聊天工具。 ICQ在更新时存在安全漏洞，远程攻击者可利用此漏洞以用户的权限执行任意代码。 ICQ 7不检查更新服务器的ID或通过其自动更新机制下载的更新的真实性。通过模拟更新服务器（例如DNS欺骗），攻击者可假装其更新服务器或在ICQ客户端下次启动时发送任意文件。因为ICQ在引导Windows时立即自动默认启动，并在每次启动时检查更新，所以很容易受到攻击 ICQ ICQ 7.2 ICQ ICQ 7 厂商补丁： ICQ --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2011-0487

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism...

Code injection

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism...

CVE-2011-0487

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism...

CVE-2011-0487

The CVE-2011-0487 issue affects ICQ 7 where the update mechanism does not verify update authenticity, enabling a man-in-the-middle attacker to deliver a crafted file via the automatic-update channel and achieve arbitrary code execution. Public sources in the connected documents consistently descr...

ICQ update server spoofing

Server and updates identity is not checked during automated update...

Remote Code Execution in ICQ 7

SUMMARY The ICQ 7 instant messaging client allows remote code execution due to a flaw in its automatic update mechanism. VULNERABLE APPLICATIONS All versions of ICQ 7 for Windows, up to version 7.2, build 3525 which is the current version ICQ 6 and older versions were not tested. Other ICQ client...

ICQ 7 Failed Origin Check

SUMMARY The ICQ 7 instant messaging client allows remote code execution due to a flaw in its automatic update mechanism. VULNERABLE APPLICATIONS All versions of ICQ 7 for Windows, up to version 7.2, build 3525 which is the current version ICQ 6 and older versions were not tested. Other ICQ client...

KLA10427 ACE vulnerability in ICQ

Insecure updates were found in ICQ 7. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely by spoofing the update server. Original advisories SecurityFocus xforce Related products ICQ CVE list CVE-2011-0487 critical Solution...

ICQ 7 fails to verify the origin of software updates

Overview ICQ 7 does not verify the origin of automatic updates which may allow a remote attacker to execute arbitrary code. Description According to ICQ's website: "ICQ, the pioneer of Instant Messaging IM, now offers the optimal integration between Instant Messaging and Social Networks with the...

SuSE 11 / 11.1 Security Update : kdenetwork (SAT Patch Numbers 3563 / 3564)

This update of kdenetwork fixes several bugs, the security related issues are : - The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary directories. CVE-2010-1000: CVSS v2 Base Score: 4.3...

Fedora 12 : kdenetwork-4.4.5-4.fc12 (2010-18029)

Includes fixes for a security issue in KGet, and login issue for kopete icq plugin see http://bugs.kde.org/257008 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

ISS - 'PAM.dll' ICQ Parser Buffer Overflow (Metasploit)

$Id: blackicepamicq.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...