ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
BID:35150
Info
ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
| Bugtraq ID: | 35150 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-1915 |
| Remote: | Yes |
| Local: | No |
| Published: | May 30 2009 12:00AM |
| Updated: | Apr 13 2015 09:10PM |
| Credit: | Nine:Situations:Group::pyrokinesis |
| Vulnerable: |
Icq ICQ 6.5 |
| Not Vulnerable: | |
Discussion
ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
ICQ is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to cause an affected application (e.g. Windows Explorer) to crash, effectively denying service. Attackers may also be able to execute arbitrary code, but this has not been confirmed.
ICQ 6.5 is vulnerable; other versions may also be affected.
ICQ is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Attackers can exploit this issue to cause an affected application (e.g. Windows Explorer) to crash, effectively denying service. Attackers may also be able to execute arbitrary code, but this has not been confirmed.
ICQ 6.5 is vulnerable; other versions may also be affected.
Exploit / POC
ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
ICQ 'ICQToolBar.dll' Denial of Service Vulnerability
References:
References: