CVE-2009-1915: Icq

Medium severity, CVSS 4.3. EPSS: 5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.

Affected products

• Icq Icq: version 6.5 only

Published 2009-06-04. Last modified 2026-06-16.