ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ users contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Icq | Mirabilis | 2000.0a (including) | 2000.0a (including) |
| Icq | Mirabilis | 2000.0b_build3278 (including) | 2000.0b_build3278 (including) |
| Icq | Mirabilis | 2001a (including) | 2001a (including) |