CVE-1999-1289: Mirabilis Icq

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.

Affected products

• Mirabilis Icq: version 98_beta only

Published 1998-11-11. Last modified 2026-06-16.