CVE-2011-0487

CVE-2011-0487 describes a critical vulnerability in ICQ 7 where the application fails to authenticate updates. This flaw allows man-in-the-middle attackers to execute arbitrary code on a user's system by intercepting and replacing legitimate update files with malicious ones. With a CVSS score of 9.3 (Critical), this vulnerability has a network attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.