PT-2005-4229 · Mirabilis · Mirabilis Icq

Atmaca · Published 2005-11-02 · Updated 2016-10-18 · CVE-2005-3433

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mirabilis ICQ version 2003a

Description The issue allows attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields, resulting in a buffer overflow.

Recommendations For Mirabilis ICQ version 2003a, as a temporary workaround, consider restricting the input length for the First Name and Last Name fields to prevent buffer overflow until a patch is available.

Fix

Related Identifiers

CVE-2005-3433

Affected Products

Mirabilis Icq

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-3433 · Security Note
• http://marc.info/?l=bugtraq&m=113063323109149&w=2 · Note