PT-2005-4229 · Mirabilis · Mirabilis Icq

Atmaca · Publicado 2005-11-02 · Atualizado 2016-10-18 · CVE-2005-3433

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mirabilis ICQ version 2003a

Description The issue allows attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields, resulting in a buffer overflow.

Recommendations For Mirabilis ICQ version 2003a, as a temporary workaround, consider restricting the input length for the First Name and Last Name fields to prevent buffer overflow until a patch is available.

Correção

Identificadores relacionados

CVE-2005-3433

Produtos afetados

Mirabilis Icq

Referências · 2

• http://marc.info/?l=bugtraq&m=113063323109149&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3433 · Nota de Segurança