CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
95.0%
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Vendor | Product | Version | CPE |
---|---|---|---|
mirabilis | icq | 2000.0b+build3278 | cpe:/a:mirabilis:icq:2000.0b+build3278::: |
mirabilis | icq | 99a+2.21build1800 | cpe:/a:mirabilis:icq:99a+2.21build1800::: |
mirabilis | icq | 2002a+build3727 | cpe:/a:mirabilis:icq:2002a+build3727::: |
mirabilis | icq | 2000.0a | cpe:/a:mirabilis:icq:2000.0a::: |
mirabilis | icq | 2003a+build3800 | cpe:/a:mirabilis:icq:2003a+build3800::: |
mirabilis | icq | 2001a | cpe:/a:mirabilis:icq:2001a::: |
mirabilis | icq | 2001b+build3636 | cpe:/a:mirabilis:icq:2001b+build3636::: |
mirabilis | icq | 2001b+build3659 | cpe:/a:mirabilis:icq:2001b+build3659::: |
mirabilis | icq | 2003a+build3777 | cpe:/a:mirabilis:icq:2003a+build3777::: |
mirabilis | icq | 2003a+build3799 | cpe:/a:mirabilis:icq:2003a+build3799::: |