CVE-2001-1305: Mirabilis Icq

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.

Affected products

• Mirabilis Icq: version 2000.0a only; version 2000.0b_build3278 only; version 2001a only

Published 2001-08-17. Last modified 2026-06-16.