|
Mirabilis ICQ POP3 Client Date Field Signed Integer Overflow Vulnerability
A vulnerability has been reported for the POP3 client of ICQ that may result in the execution of arbitrary attacker-supplied commands. The vulnerability exists due to insufficient boundary checks performed by the integrated POP3 mail client when verifying the length of certain e-mail header fields. Successful exploitation of this issue may allow an attacker to overwrite sensitive memory with malicious values which will result in the client throwing an unhandled exception and crashing. |
|
 Privacy Statement |
