https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-0487.htmlhttps://patchthecve.com/cve/CVE-2011-0487.htmlTue, 16 Jun 2026 23:27:29 +0000HIGH 9.3: ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.https://patchthecve.com/cve/CVE-2008-7136.htmlhttps://patchthecve.com/cve/CVE-2008-7136.htmlTue, 16 Jun 2026 23:03:41 +0000MEDIUM 4.3: toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the (1) RequestURL, (2) GetPropertyById, or (3) SetPropertyById method, different vectors than CVE-2008-7135.https://patchthecve.com/cve/CVE-2008-7135.htmlhttps://patchthecve.com/cve/CVE-2008-7135.htmlTue, 16 Jun 2026 23:03:41 +0000MEDIUM 4.3: toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the IsChecked method, a different vector than CVE-2008-7136.https://patchthecve.com/cve/CVE-2009-1915.htmlhttps://patchthecve.com/cve/CVE-2009-1915.htmlTue, 16 Jun 2026 23:08:21 +0000MEDIUM 4.3: Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folderhttps://patchthecve.com/cve/CVE-2008-1920.htmlhttps://patchthecve.com/cve/CVE-2008-1920.htmlTue, 16 Jun 2026 22:52:45 +0000HIGH 7.5: Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message.https://patchthecve.com/cve/CVE-2008-1120.htmlhttps://patchthecve.com/cve/CVE-2008-1120.htmlTue, 16 Jun 2026 22:51:02 +0000HIGH 9.3: Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbitrary code or cause a denial of service (crash) via unspecified vectors related to HTML code generation.https://patchthecve.com/cve/CVE-2000-0552.htmlhttps://patchthecve.com/cve/CVE-2000-0552.htmlTue, 16 Jun 2026 21:51:58 +0000MEDIUM 5.5: ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.https://patchthecve.com/cve/CVE-1999-1342.htmlhttps://patchthecve.com/cve/CVE-1999-1342.htmlTue, 16 Jun 2026 21:50:14 +0000MEDIUM 5.0: ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port.