CVE-2003-0236: Mirabilis Icq

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.

Affected products

• Mirabilis Icq: version 99a_2.15build1701 only; version 99a_2.21build1800 only; version 2000.0a only; version 2000.0b_build3278 only; version 2001a only; version 2001b_build3636 only; …

Published 2003-05-27. Last modified 2026-06-16.