CVE-2002-0028

CVE-2002-0028 describes a remote code execution vulnerability in the Windows ICQ client prior to the 2001B Beta v5.18 Build #3659, triggered by processing a Voice Video & Games request. The buffer overflow occurs in code handling that TLV/message and, before 2001B, in the core client (and in 2001...

CVE-2002-0254

ICQ 2001b Build 3659 allows remote attackers to cause a denial of service crash via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails...

ICQLite executable trojaning

Title: ICQ Lite executable trojaning Affected: ICQLite 2003a Vendor: ICQ Inc Risk: Average Exploitable: Yes Remote: No I. Intro: ICQ Lite is popular internet messenger software. This is only ICQ version which requires no elevated privileges such as Power User to work, so, it's often used by...

CVE-2001-1305

CVE-2001-1305 affects ICQ 2001a Alpha and earlier. A remote attacker can cause an ICQ user’s contact list to automatically include arbitrary UINs by visiting a web page whose Content-Type is set to application/x-icq, which IE processes. The connected documents consistently describe ICQ as vulnera...

CVE-2001-1305

ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer...

CVE-2002-0254

ICQ 2001b Build 3659 allows remote attackers to cause a denial of service crash via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails...

CVE-2002-0254

CVE-2002-0254 affects ICQ 2001b Build 3659. The vulnerability allows a remote attacker to cause a denial-of-service (crash) by supplying a malformed picture containing abnormally large height and width values, which triggers the crash when the image is viewed in Userdetails. The available records...

ICQ contact list DoS

Invalid contact packet causes program to hang...

DOS for Icq 2001&2002

Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...

Possible vulnerabilities of ICQ files opened in IE or OE

Hello everybody, Sorry for my lingo, but I had to learn it in a huge pain. However, if you don't like or cannot understand it, try to learn polish instead gotcha =o Maybe it's an old topic, but maybe not. While playing with ICQ i have found that the program registers for its own use files with .u...

DoS and forced user addition to ICQ

ICQ register appllication/x-icq MIME type .uin for files. This files allows to add user to contact list without notice. It's also possible to cause DoS against ICQ via .hpf files...

CVE-2002-0028

Buffer overflow in ICQ before 2001B Beta v5.18 Build 3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request...

Переполнение буфера в ICQ при обработке jpeg (buffer overflow)

При обработке картинки с очень большими размерами происходит переполнение буфера...

ICQ For Mac OSX 2.6 Client - Denial of Service

ICQ For Mac OSX 2.6 Client - Denial of Service // source: https://www.securityfocus.com/bid/4031/info ICQ For MacOS X is a port of the popular Mirabilis ICQ client to the Apple MacOS X platform. It is freely available. It is possible to cause MacOS X ICQ clients to crash by sending an excessively...

ICQ For Mac OSX 2.6 Client - Denial of Service

// source: https://www.securityfocus.com/bid/4031/info ICQ For MacOS X is a port of the popular Mirabilis ICQ client to the Apple MacOS X platform. It is freely available. It is possible to cause MacOS X ICQ clients to crash by sending an excessively long request 19000+ characters. MacOS X ICQ...

kicq 2.0.0b1 - Invalid ICQ Packet Denial of Service

source: https://www.securityfocus.com/bid/4018/info kicq 2.0.0b1 is an ICQ client for the K Desktop Environment KDE. kicq can be crashed remotely by initiating a telnet connection to a port it is listening on and sending "random" characters. This does not affect other components of the system, on...

kicq 2.0.0b1 - Invalid ICQ Packet Denial of Service

kicq 2.0.0b1 - Invalid ICQ Packet Denial of Service source: https://www.securityfocus.com/bid/4018/info kicq 2.0.0b1 is an ICQ client for the K Desktop Environment KDE. kicq can be crashed remotely by initiating a telnet connection to a port it is listening on and sending "random" characters. Thi...

Advisory CA-2002-02 Buffer Overflow in AOL ICQ

CERT Advisory CA-2002-02 Buffer Overflow in AOL ICQ Original release date: January 24, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected AOL Mirabilis ICQ Versions 2001A and prior Voice Video & Games plugin installed with AOL...

Переполнение буфера в ICQ (buffer overflow)

Переполнение буфера при разборе пакета...

ICQ contains a buffer overflow while processing Voice Video & Games feature requests

Overview There is a remotely exploitable buffer overflow in ICQ. Attackers that are able to exploit the vulnerability may be able to execute arbitrary code with the privileges of the victim user. Description ICQ is a program for communicating with other users over the Internet. ICQ is widely used...