CVE-2003-0235: Mirabilis Icq

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.

Affected products

• Mirabilis Icq: version 99a_2.15build1701 only; version 99a_2.21build1800 only; version 2000.0a only; version 2000.0b_build3278 only; version 2001a only; version 2001b_build3636 only; …

Published 2003-05-27. Last modified 2026-06-16.