Vulnerability in Mirabilis Icq

CVE-2003-0237

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.

Affected products

Mirabilis Icq — versions 99a_2.15build1701, 99a_2.21build1800, 2000.0a
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)