CVE-2008-1920 Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary c...
HighCVSS 7.5
EPSS 5.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icq mirabilis icq | = 6.0 | No fix listed |
References
- 29821 third-party-advisory vendor-advisory
- www.infigo.hr exploit
- 20080416 [INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability mailing-list
- 28803 exploit vdb-entry
- ADV-2008-1299 vdb-entry
- icq-boxelyrenderer-bo(41852) vdb-entry