Description
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
References
- icq-auto-add-user(7028) vdb-entry
- 3226 vdb-entry
- 20010822 Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users mailing-list