CVE-2006-0766: Mirabilis Icq

Medium severity, CVSS 5.1. EPSS: 1.2% chance of exploitation in the next 30 days.

ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly containing other modified properties such as company name, icon, and description, which could trick a user into executing arbitrary programs.

Affected products

• Mirabilis Icq: version 2003a only; version 2003b only
• Mirabilis Icq Lite: version 4.0 only; version 4.1 only

Published 2006-02-18. Last modified 2026-06-16.