Description (CNA)
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
- http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11944
- http://marc.info/?l=bugtraq&m=105216842131995&w=2
- http://www.securityfocus.com/bid/7464
ADP enrichment
No English description supplied.