high7.5
CVE-2003-0235
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the resp…
Impact
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mirabilis | Icq | Versions 99a_2.15build1701, 99a_2.21build1800, 2000.0a, 2000.0b_build3278, 2001a, 2001b_build3636 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
- http://marc.info/?l=bugtraq&m=105216842131995&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
- http://www.securityfocus.com/bid/7461
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11938
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
- http://marc.info/?l=bugtraq&m=105216842131995&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
- http://www.securityfocus.com/bid/7461
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11938