DoS and forced user addition to ICQ updated since 23.08.2001
Published:		16.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1422
Type:		client
Level:		5/10
Description:		ICQ register appllication/x-icq MIME type (.uin) for files. This files allows to add user to contact list without notice. It's also possible to cause DoS against ICQ via .hpf files.

Affected:

MIRABILIS : ICQ 2001a

Original document		silentsupporter_(at)_poczta.onet.pl, Possible vulnerabilities of ICQ files opened in IE or OE (16.04.2002)
		AreS, Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users (23.08.2001)

Discuss:

Read or add your comments to this news (0 comments)