Approved changes feed: RSS · Atom

cpe:2.3:a:mirabilis:icq:2003b:*:*:*:*:*:*:*

part: a version: 2003b update: *

VendorMirabilis (bec1ecca-7c43-5c0f-8a60-8e163ded9c1f)
ProductIcq (10afcce9-a384-5a5b-878e-dbdb732885d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4662 vulnerable 2026-06-08 04:49:18.486892 Details available
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.
Published: 2006-09-09T00:00:00.000Z
Updated: 2024-08-07T19:23:40.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0766 vulnerable 2026-06-08 04:48:55.235523 Details available
ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly containing other modified properties such as company name, icon, and description, which could trick a user into executing arbitrary programs.
Published: 2006-02-18T02:00:00.000Z
Updated: 2024-08-07T16:48:56.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0765 vulnerable 2026-06-08 04:48:55.233811 Details available
GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a specific length, which truncates the malicious extension from the display and could trick a user into executing arbitrary programs.
Published: 2006-02-18T02:00:00.000Z
Updated: 2024-08-07T16:48:56.445Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.