CVE-2003-0237
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify...
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
Exploit likelihood
What each source reports
NVD Score used
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
- Record
CVE-2003-0237- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
- Record
CVE-2003-0237- Updated
- 2026-11-02
EUVDEUVD-2003-0232 No score
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
- Record
EUVD-2003-0232- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g452-hwxv-ph5w No score
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify...
The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.
- Record
GHSA-g452-hwxv-ph5w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0237 is a high vulnerability (CVSS 7.5) in Mirabilis Icq, published May 7, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
exchange.xforce.ibmcloud.com/vulnerabilities/11944
marc.info?l=bugtraq&m=105216842131995&w=2
securityfocus.com/bid/7464
nvd.nist.gov/vuln/detail/CVE-2003-0237
github.com/advisories/GHSA-g452-hwxv-ph5w