Approved changes feed: RSS · Atom

cpe:2.3:a:mirabilis:icq:99a_2.21build1800:*:*:*:*:*:*:*

part: a version: 99a_2.21build1800 update: *

VendorMirabilis (bec1ecca-7c43-5c0f-8a60-8e163ded9c1f)
ProductIcq (10afcce9-a384-5a5b-878e-dbdb732885d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4662 vulnerable 2026-06-08 04:49:18.478901 Details available
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
Published: 2006-09-09T00:00:00.000Z
Updated: 2024-08-07T19:23:40.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0239 vulnerable 2026-06-08 04:47:21.102461 Details available
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0238 vulnerable 2026-06-08 04:47:21.101884 Details available
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0237 vulnerable 2026-06-08 04:47:21.101294 Details available
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0236 vulnerable 2026-06-08 04:47:21.100688 Details available
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0235 vulnerable 2026-06-08 04:47:21.094604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0564 vulnerable 2026-06-08 04:45:18.332135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.