CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0239

icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...

CVE-2003-0238

The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service CPU consumption by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag...

CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0235

CVE-2003-0235 is a format string vulnerability in Mirabilis ICQ Pro 2003a's integrated POP3 client (POP3.dll). The bug resides in the UIDL server response string, where format specifiers can be exploited by a remote attacker posing as the POP3 server, potentially enabling arbitrary code execution...

CVE-2003-0236

CVE-2003-0236 concerns Mirabilis ICQ Pro 2003a’s integrated POP3 client (POP3.dll COM object). The vulnerability is a 16‑bit signed overflow in the Subject and Date headers (Subject/Date fields) of e‑mail messages, allowing an attacker to craft headers that can execute arbitrary commands on a vul...

CORE-2003-0303: Multiple Vulnerabilities in Mirabilis ICQ client

Core Security Technologies Advisory http://www.coresecurity.com Multiple Vulnerabilities in Mirabilis ICQ client Date Published: 2003-05-05 Last Update: 2003-05-02 Advisory ID: CORE-2003-0303 Bugtraq IDs: 7461, 7462, 7463, 7464, 7465, 7466 CVE Names: CAN-2003-0235, CAN-2003-0236, CAN-2003-0237,...

Multiple Vulnerabilities in Mirabilis ICQ Pro 2003a client

Advisory ID Internal CORE-2003-0303 Advisory Information: Date Published: 2003-05-05 Last Update: 2003-05-02 Advisory ID: CORE-2003-0303 Bugtraq IDs:7461, 7462, 7463, 7464, 7465, 7466 CVE Names:CAN-2003-0235, CAN-2003-0236, CAN-2003-0237, CAN-2003-0238, CAN-2003-0239 CERT:VU936164, VU792988,...

CVE-2001-0367

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters...

CVE-2001-0367

The vulnerability CVE-2001-0367 affects Mirabilis ICQ WebFront Plug-in for ICQ2000b (Build 3278). A remote attacker can cause a denial of service by sending HTTP URL requests containing a large number of percent characters. The issue impacts availability (PARTIAL) with a CVSS v2 base score of 5.0...

icq-hidden-files.txt

Date: Fri, 1 Jan 1999 14:20:34 +1100 From: Justin Clift To: [email protected] Subject: Win32 ICQ 98a flaw Hello everyone, A while ago I found a flaw in ICQ which I believe to be fairly serious and asked whom to notify. Thanks for everyone's assistance in this. :- I notified Mirabilis and they...