← Back

Icq

icq

Vendor: Icq • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Icq
1Icq
Apr 29, 2026
Jan 18, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
ICQ 7 does not verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a crafted file that is fetched through an automatic-update mechanism.
1Icq
1Icq
Apr 23, 2026
Jun 4, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL fil...Show more
Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.Show less
1Icq
1Icq
Apr 16, 2026
Jun 6, 2000
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.