Approved changes feed: RSS · Atom

cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*

part: a version: 2001a update: *

VendorMirabilis (bec1ecca-7c43-5c0f-8a60-8e163ded9c1f)
ProductIcq (10afcce9-a384-5a5b-878e-dbdb732885d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4662 vulnerable 2026-06-08 04:49:18.480764 Details available
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
Published: 2006-09-09T00:00:00.000Z
Updated: 2024-08-07T19:23:40.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0239 vulnerable 2026-06-08 04:47:21.102511 Details available
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0238 vulnerable 2026-06-08 04:47:21.101939 Details available
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0237 vulnerable 2026-06-08 04:47:21.101350 Details available
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0236 vulnerable 2026-06-08 04:47:21.100743 Details available
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Published: 2003-05-07T04:00:00.000Z
Updated: 2024-08-08T01:43:36.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0235 vulnerable 2026-06-08 04:47:21.095663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2075 vulnerable 2026-06-08 04:47:19.029823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0028 vulnerable 2026-06-08 04:46:20.419768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1305 vulnerable 2026-06-08 04:46:19.546525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.