CVE-2003-0238: Mirabilis Icq

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag.

Affected products

• Mirabilis Icq: version 99a_2.15build1701 only; version 99a_2.21build1800 only; version 2000.0a only; version 2000.0b_build3278 only; version 2001a only; version 2001b_build3636 only; …

Published 2003-05-27. Last modified 2026-06-16.