What’s Vulnerable › Vulnerabilities

CVE-2011-0487

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-01-18 · updated 2026-06-16
• Weakness: CWE-94

Description

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.

Affected products

• Icq: 7

References

• http://osvdb.org/70486
• http://www.kb.cert.org/vuls/id/680540
• http://www.securityfocus.com/archive/1/515724/100/0/threaded
• http://www.securityfocus.com/bid/45805
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64711
• http://osvdb.org/70486
• http://www.kb.cert.org/vuls/id/680540
• http://www.securityfocus.com/archive/1/515724/100/0/threaded
• http://www.securityfocus.com/bid/45805
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64711

Get alerted when CVE-2011-0487 or the next vulnerability affects your stack