7.5

CVE-2003-0236

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mirabilis ≫ Icq Version 99a_2.15build1701
Mirabilis ≫ Icq Version 99a_2.21build1800
Mirabilis ≫ Icq Version 2000.0a
Mirabilis ≫ Icq Version 2000.0b_build3278
Mirabilis ≫ Icq Version 2001a
Mirabilis ≫ Icq Version 2001b_build3636
Mirabilis ≫ Icq Version 2001b_build3638
Mirabilis ≫ Icq Version 2001b_build3659
Mirabilis ≫ Icq Version 2002a_build3722
Mirabilis ≫ Icq Version 2002a_build3727
Mirabilis ≫ Icq Version 2003a_build3777
Mirabilis ≫ Icq Version 2003a_build3799
Mirabilis ≫ Icq Version 2003a_build3800
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.29% 0.869
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
http://marc.info/?l=bugtraq&m=105216842131995&w=2
http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
Vendor Advisory
http://www.securityfocus.com/bid/7462
Vendor Advisory
http://www.securityfocus.com/bid/7463
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/11939