icq vulnerabilities and fixes

Recent CVEs affecting icq, with upgrade or downgrade steps. 28 tracked.

icq has 28 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2011-01-18. Highest priority: CVE-2006-5650 (score 56/100).

• CVE-2011-0487 HIGH 9.3 DOWNGRADE ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitra
• CVE-2009-1915 MEDIUM 4.3 DOWNGRADE Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to caus
• CVE-2007-1904 MEDIUM 4.3 UPGRADE UPGRADE Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably ear
• CVE-2006-5724 LOW 2.1 DOWNGRADE Heap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local users to caus
• CVE-2006-5650 HIGH 7.5 DOWNGRADE The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download an
• CVE-2006-4662 HIGH 7.5 DOWNGRADE Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows
• CVE-2006-2303 MEDIUM 6.4 DOWNGRADE Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attack
• CVE-2006-0766 MEDIUM 5.1 DOWNGRADE DOWNGRADE ICQ Inc
• CVE-2006-0765 MEDIUM 5.1 DOWNGRADE DOWNGRADE GUI display truncation vulnerability in ICQ Inc
• CVE-2005-3433 MEDIUM 5.1 DOWNGRADE Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing
• CVE-2003-0769 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attacke
• CVE-2003-0239 MEDIUM 5.0 DOWNGRADE icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial
• CVE-2003-0238 MEDIUM 5.0 DOWNGRADE The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CP
• CVE-2003-0237 HIGH 7.5 DOWNGRADE The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authentici
• CVE-2003-0236 HIGH 7.5 DOWNGRADE Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arb
• CVE-2003-0235 HIGH 7.5 DOWNGRADE Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to exec
• CVE-2002-2329 HIGH 7.8 DOWNGRADE ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or cra
• CVE-2002-2075 MEDIUM 5.0 DOWNGRADE ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a c
• CVE-2002-1743 MEDIUM 5.0 DOWNGRADE AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf fil
• CVE-2002-0254 MEDIUM 5.0 DOWNGRADE ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that
• CVE-2002-0028 HIGH 7.5 DOWNGRADE Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code v
• CVE-2001-1305 MEDIUM 5.0 DOWNGRADE ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's conta
• CVE-2001-0367 MEDIUM 5.0 DOWNGRADE Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via
• CVE-2000-0564 MEDIUM 5.0 DOWNGRADE The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to c
• CVE-2000-0552 MEDIUM 5.5 DOWNGRADE ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, w
• CVE-2000-0046 HIGH 7.5 DOWNGRADE Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL with
• CVE-1999-1289 HIGH 7.5 DOWNGRADE ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet i
• CVE-1999-0474 MEDIUM 5.0 DOWNGRADE The ICQ Webserver allows remote attackers to use .

FAQ

How do I fix icq vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is icq being exploited right now?

None of the tracked icq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which icq CVE should I patch first?

CVE-2006-5650 currently ranks highest (56/100): The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download an.

RSS feed for icq · ← Back to latest CVEs