Lucene search

K
kasperskyKaspersky LabKLA10214
HistoryJun 04, 2009 - 12:00 a.m.

KLA10214 DoS vulnerability in ICQ

2009-06-0400:00:00
Kaspersky Lab
threats.kaspersky.com
24

8.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.057 Low

EPSS

Percentile

93.3%

A buffer overflow was found in ICQ. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed internet shortcut.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

ICQ

CVE list

CVE-2009-1915 warning

Solution

Update to latest version

ICQ

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • ICQ 6.5

8.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.057 Low

EPSS

Percentile

93.3%