Vulnerabilities

TI-2011-00414 CVE-2011-0487 · GHSA-p7pv-f2ch-vv7g

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle…

MEDIUM 45

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02547 Published 2011-01-18 No fix listed CWE-94

TI-2009-01826 CVE-2009-1915 · GHSA-7j42-53vc-p6r7

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows…

LOW 28

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL fil…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04951 Published 2009-06-04 No fix listed CWE-119

TI-2000-00551 CVE-2000-0552 · GHSA-55c6-r3wh-x7cj

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and…

LOW 27

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01116 Published 2000-10-13 No fix listed CWE-459

Vulnerabilities

Filters

ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle…

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows…

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and…