CVE-2008-1920

Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message.

Link	Resource
http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-04-08	Exploit
http://www.securityfocus.com/bid/28803	Exploit
http://secunia.com/advisories/29821	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1299/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41852
http://www.securityfocus.com/archive/1/490921/100/0/threaded

Configuration 1

cpe:2.3:a:icq:mirabilis_icq:6.0:*:*:*:*:*:*:*

---

Published : 2008-04-23 01:05

Updated : 2018-10-11 08:37

---

NVD link : CVE-2008-1920

Mitre link : CVE-2008-1920

Icq

Mirabilis Icq

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer