Lucene search

K
cve[email protected]CVE-2009-1915
HistoryJun 04, 2009 - 5:30 p.m.

CVE-2009-1915

2009-06-0417:30:00
CWE-119
web.nvd.nist.gov
24
cve-2009-1915
icq
buffer overflow
denial of service
remote exploit
security vulnerability

8.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.057 Low

EPSS

Percentile

93.3%

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.

CPENameOperatorVersion
icq:icqicqeq6.5

8.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.057 Low

EPSS

Percentile

93.3%

Related for CVE-2009-1915