CVE-2003-0237

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-05-27 · updated 2026-06-16

Description

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

Affected products

Mirabilis Icq: 99a_2.15build1701, 99a_2.21build1800, 2000.0a, 2000.0b_build3278, 2001a, 2001b_build3636 (+7)

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
http://marc.info/?l=bugtraq&m=105216842131995&w=2
http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
http://www.securityfocus.com/bid/7464
https://exchange.xforce.ibmcloud.com/vulnerabilities/11944
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
http://marc.info/?l=bugtraq&m=105216842131995&w=2
http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
http://www.securityfocus.com/bid/7464
https://exchange.xforce.ibmcloud.com/vulnerabilities/11944

Get alerted when CVE-2003-0237 or the next vulnerability affects your stack