Mirabilis ICQ .hpf Denial of Service Vulnerability
BID:4514
Info
Mirabilis ICQ .hpf Denial of Service Vulnerability
| Bugtraq ID: | 4514 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 15 2002 12:00AM |
| Updated: | Apr 15 2002 12:00AM |
| Credit: | Discovered by <[email protected]>. |
| Vulnerable: |
Mirabilis ICQ 2002 a Build#3722 |
| Not Vulnerable: | |
Discussion
Mirabilis ICQ .hpf Denial of Service Vulnerability
When a new user registers with ICQ, various files are created which are specific to ICQ, including .pnq (ICQ Plugin), .scm (ICQ Sound Scheme), .uin (ICQ User) and .hpf (ICQ Home Page Factory). If a file with any of the mentioned file extensions is accessed, ICQ is the default handler.
An issue has been discovered which could cause ICQ to crash. Reportedly, if a user attempts to access a malformed .hpf file ICQ will crash.
When a new user registers with ICQ, various files are created which are specific to ICQ, including .pnq (ICQ Plugin), .scm (ICQ Sound Scheme), .uin (ICQ User) and .hpf (ICQ Home Page Factory). If a file with any of the mentioned file extensions is accessed, ICQ is the default handler.
An issue has been discovered which could cause ICQ to crash. Reportedly, if a user attempts to access a malformed .hpf file ICQ will crash.