ICQ 'Personal Status Manager' Remote Buffer Overflow Vulnerability

Bugtraq ID:	28803
Class:	Input Validation Error
CVE:	CVE-2008-1920
Remote:	Yes
Local:	No
Published:	Apr 16 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	Leon Juranic
Vulnerable:	Icq ICQ 6
Not Vulnerable:

ICQ 'Personal Status Manager' Remote Buffer Overflow Vulnerability

ICQ is prone to a remote buffer-overflow vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers.

A remote attacker may execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial of service.

This issue affects ICQ 6 build 6043; other versions may also be vulnerable.

ICQ 'Personal Status Manager' Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

The following proof of concept is available:

------
|<a href="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"><img
src="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" border="0" /></a>|
------

ICQ 'Personal Status Manager' Remote Buffer Overflow Vulnerability

Solution:
Reports indicate that the vendor addressed this issue through an automatic update on March 1, 2008. Symantec was unable to verify this information. Please contact the vendor for more information.

ICQ 'Personal Status Manager' Remote Buffer Overflow Vulnerability

References:

• ICQ Homepage (Mirabilis)
  
• INFIGO IS Security Advisory #INFIGO-2008-04-08 (INFIGO)
  
• [INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability ("infocus" )