CVE-2003-0237: Mirabilis Icq

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

Affected products

• Mirabilis Icq: version 99a_2.15build1701 only; version 99a_2.21build1800 only; version 2000.0a only; version 2000.0b_build3278 only; version 2001a only; version 2001b_build3636 only; …

Published 2003-05-27. Last modified 2026-06-16.