Summary
This host has ICQ installed and is prone to Stack-based Buffer Overflow vulnerability.
Impact
An attacker may leverage this issue by execute arbitrary code and buffer overflow in the context of affected system, and can cause the application to crash (persistent).
Impact Level: System/Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
Error due to improper bounds checking by the ICQToolBar.dll and this can be caused via an Internet shortcut .URL file containing a long URL parameter, when browsing a folder that contains this file.
Affected
ICQ version 6.5 on Windows
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2009-1915 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- VLC Media Player Stack Overflow Vulnerability (Win-Mar09)
- VLC Media Player 'MP4_ReadBox_skcr()' Buffer Overflow Vulnerability (Linux)
- SquidGuard Multiple Buffer Overflow Vulnerabilities
- XnView Multiple Image Decompression Heap Overflow Vulnerabilities (Windows)
- VLC Media Player OGG Demuxer Buffer Overflow Vulnerability (Windows)