Vulnerability Details : CVE-2001-1305
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
Exploit prediction scoring system (EPSS) score for CVE-2001-1305
Probability of exploitation activity in the next 30 days: 0.38%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 69 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-1305
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2001-1305
Products affected by CVE-2001-1305
- cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*
- cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*
- cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*