Format string

Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service crash via unspecified vectors related to HTML code generation...

CVE-2008-1120

Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service crash via unspecified vectors related to HTML code generation...

CVE-2008-1120

CVE-2008-1120 affects Mirabilis ICQ 6, build 6043, via a vulnerability in the embedded Internet Explorer component responsible for HTML code generation. The issue is a format string vulnerability that may allow a remote attacker to trigger arbitrary code execution or cause a crash on the affected...

ICQ消息处理远程格式串处理漏洞

BUGTRAQ ID: 28027 ICQ是一款流行的即时通讯聊天工具。 ICQ在生成HTML代码以在内嵌的Internet Explorer组件中显示消息时存在格式串错误，如果远程攻击者向其他用户发送了包含有格式串标识符的特制消息的话，就可以触发这个漏洞，导致执行任意指令。 AOL ICQ 6 临时解决方法： 启用“只允许来自我联系人名单上的用户的消息”选项并从联系人列表中删除不可信任的用户。 如果启用了“显示来自不认识人消息前请询问”选项的话，拒绝入站消息。 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

ICQ 6 Version Detection

Binary data 4404.prm...

Debian: Security Advisory (DSA-211)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 012-1 (micq)

The remote host is missing an update to micq announced via advisory DSA 012-1. OpenVAS Vulnerability Test $Id: deb0121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 012-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-2329

ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service CPU consumption or crash via a message with a large number of emoticons...

CVE-2002-2329

CVE-2002-2329 affects ICQ client versions 2001b, 2002a and 2002b. The vulnerability allows remote attackers to cause a denial of service (CPU consumption or crash) by sending a message containing a large number of emoticons. The connected Red Hat and CVE listing entries confirm the same impact. N...

Buffer overflow

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5590

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

CVE-2007-5590

Miranda IM is affected by stack-based buffer overflow vulnerabilities described across multiple CVEs in 2007. Specifically, Red Hat and NVD entries indicate that Miranda IM 0.6.8 and 0.7.0 are exploitable via crafted Yahoo! Messenger packets to gain arbitrary code execution, with potential overla...

CVE-2007-5590

Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...

mxBB Module mx_glance 2.3.3 - Remote File Inclusion

mxBB Module mxglance 2.3.3 - Remote File Inclusion ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security...

Directory traversal

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

CVE-2007-1904

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

CVE-2007-1904

CVE-2007-1904 describes a directory-traversal vulnerability in AOL Instant Messenger (AIM) ≤ 5.9 and ICQ ≤ 5.1 (likely earlier) that allows user-assisted remote attackers to write files to arbitrary locations by supplying a filename containing .. in a file transfer operation. The core issue is im...

CVE-2007-1904

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

AOL instant messenger / ICQ directory traversal

Directory traversal on file receiption...

iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability

AOL AIM and ICQ File Transfer Path-Traversal Vulnerability iDefense Security Advisory 04.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2007 I. BACKGROUND AOL Instant Messenger and ICQ are instant messaging applications that allow users to exchange messages and files. More...