high7.5
CVE-2003-0237
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote atta…
Impact
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mirabilis | Icq | Versions 99a_2.15build1701, 99a_2.21build1800, 2000.0a, 2000.0b_build3278, 2001a, 2001b_build3636 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
- http://marc.info/?l=bugtraq&m=105216842131995&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
- http://www.securityfocus.com/bid/7464
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11944
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
- http://marc.info/?l=bugtraq&m=105216842131995&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
- http://www.securityfocus.com/bid/7464
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11944