Skip to content
Noroxi

mirabilis records

27 published records for vendor mirabilis.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    27 records
    • CVE-2000-0046
      32Monitor

      Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.

      HighCVSS 7.5Proof of conceptEPSS 7%

      mirabilis · icqJan 10, 2000

    • CVE-2006-4662
      32Monitor

      Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute ar

      HighCVSS 7.5No exploitEPSS 6%

      mirabilis · icqSep 8, 2006

    • CVE-2002-1773
      32Monitor

      Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitr

      HighCVSS 7.5Proof of conceptEPSS 5%

      mirabilis · icq for macos xDec 31, 2002

    • CVE-2002-0028
      32Monitor

      Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games reque

      HighCVSS 7.5No exploitEPSS 5%

      mirabilis · icqFeb 27, 2002

    • CVE-2002-2329
      32Monitor

      ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large

      HighCVSS 7.8No exploitEPSS 2%

      mirabilis · icqDec 31, 2002

    • CVE-2003-0236
      31Monitor

      Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subjec

      HighCVSS 7.5No exploitEPSS 3%

      mirabilis · icqMay 27, 2003

    • CVE-2003-0235
      31Monitor

      Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format

      HighCVSS 7.5No exploitEPSS 2%

      mirabilis · icqMay 27, 2003

    • CVE-2003-0237
      30Monitor

      The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which

      HighCVSS 7.5No exploitEPSS 1%

      mirabilis · icqMay 27, 2003

    • CVE-1999-1289
      30Monitor

      ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (

      HighCVSS 7.5No exploitEPSS 1%

      mirabilis · icqNov 11, 1998

    • CVE-2006-2303
      25Monitor

      Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web sc

      MediumCVSS 6.4No exploitEPSS 1%

      mirabilis · icqMay 11, 2006

    • CVE-2000-1078
      22Monitor

      ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.

      MediumCVSS 5.0Proof of conceptEPSS 5%

      mirabilis · icq web frontDec 11, 2000

    • CVE-1999-0474
      21Monitor

      The ICQ Webserver allows remote attackers to use ..

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqApr 5, 1999

    • CVE-2003-0238
      20Monitor

      The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqMay 27, 2003

    • CVE-2003-0239
      20Monitor

      icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF8

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqMay 27, 2003

    • CVE-2002-1743
      20Monitor

      AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqDec 31, 2002

    • CVE-2002-2075
      20Monitor

      ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large co

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqDec 31, 2002

    • CVE-2001-1305
      20Monitor

      ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web pag

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqAug 17, 2001

    • CVE-2005-3433
      20Monitor

      Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings i

      MediumCVSS 5.1No exploitEPSS 1%

      mirabilis · icqNov 2, 2005

    • CVE-1999-1418
      20Monitor

      ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icq web frontMay 1, 1999

    • CVE-2000-0564
      20Monitor

      The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqMay 29, 2000

    • CVE-2002-0254
      20Monitor

      ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and wid

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqMay 29, 2002

    • CVE-2001-0367
      20Monitor

      Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a

      MediumCVSS 5.0No exploitEPSS 1%

      mirabilis · icqJun 27, 2001

    • CVE-2006-0765
      20Monitor

      GUI display truncation vulnerability in ICQ Inc.

      MediumCVSS 5.1No exploitEPSS 1%

      mirabilis · icqFeb 17, 2006

    • CVE-2006-0766
      20Monitor

      ICQ Inc.

      MediumCVSS 5.1No exploitEPSS 1%

      mirabilis · icqFeb 17, 2006

    • CVE-1999-1440
      20Monitor

      Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send

      MediumCVSS 5.1No exploitEPSS 0%

      mirabilis · icq 98aJan 1, 1999