CVE

Id
48399  
CVE No.
CVE-2011-0487  
Status
Candidate  
Description
ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.  
Phase
Assigned (20110118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525612 48399 CVE-2011-0487 BUGTRAQ:20110114 Remote Code Execution in ICQ 7  View
525613 48399 CVE-2011-0487 URL:http://www.securityfocus.com/archive/1/archive/1/515724/100/0/threaded  View
525614 48399 CVE-2011-0487 CERT-VN:VU#680540  View
525615 48399 CVE-2011-0487 URL:http://www.kb.cert.org/vuls/id/680540  View
525616 48399 CVE-2011-0487 BID:45805  View
525617 48399 CVE-2011-0487 URL:http://www.securityfocus.com/bid/45805  View
525618 48399 CVE-2011-0487 OSVDB:70486  View
525619 48399 CVE-2011-0487 URL:http://osvdb.org/70486  View
525620 48399 CVE-2011-0487 XF:icq-updates-code-execution(64711)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33894 JVNDB-2011-004136 Tor におけるサービス運用妨害 (DoS) の脆弱性 Tor には、サービス運用妨害 (アサーション失敗およびデーモン停止) 状態となる脆弱性が存在します。 CVE-2011-0492 48399 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004136.html  View