CVE-2003-0235

Published: May 27, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.

Affected (13)

Products: Mirabilis: Icq

Mirabilis

1 product

Icq

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mirabilis Icq	Version 2000.0a
Mirabilis Icq	Version 2000.0b_build3278
Mirabilis Icq	Version 2001a
Mirabilis Icq	Version 2001b_build3636
Mirabilis Icq	Version 2001b_build3638
Mirabilis Icq	Version 2001b_build3659
Mirabilis Icq	Version 2002a_build3722
Mirabilis Icq	Version 2002a_build3727
Mirabilis Icq	Version 2003a_build3777
Mirabilis Icq	Version 2003a_build3799
Mirabilis Icq	Version 2003a_build3800
Mirabilis Icq	Version 99a_2.15build1701
Mirabilis Icq	Version 99a_2.21build1800