Mirabilis : Security Vulnerabilities, CVEs, Published In 2003
Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.
Max CVSS
7.5
EPSS Score
0.58%
Published
2003-05-27
Updated
2017-07-11
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Max CVSS
7.5
EPSS Score
10.59%
Published
2003-05-27
Updated
2017-07-11
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Max CVSS
7.5
EPSS Score
1.22%
Published
2003-05-27
Updated
2017-07-11
The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.
Max CVSS
5.0
EPSS Score
1.52%
Published
2003-05-27
Updated
2017-07-11
icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT (Global Color Table) or an LCT (Local Color Table) after an Image Descriptor.
Max CVSS
5.0
EPSS Score
1.52%
Published
2003-05-27
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to insert arbitrary web script and HTML via the message field.
Max CVSS
4.3
EPSS Score
0.14%
Published
2003-09-22
Updated
2022-08-17
6 vulnerabilities found