PT-2009-2605 · Icq · Icqtoolbar

Spdr · Published 2009-09-01 · Updated 2017-09-29 · CVE-2008-7136

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ICQToolbar version 2.3

Description The issue allows remote attackers to cause a denial of service, resulting in a toolbar crash. This can be achieved by providing a long argument to certain methods, specifically the RequestURL, GetPropertyById, or SetPropertyById methods.

Recommendations For ICQToolbar version 2.3, consider avoiding the use of long arguments in the RequestURL, GetPropertyById, or SetPropertyById methods until a fix is available. As a temporary workaround, restricting the input length for these methods may help minimize the risk of a denial of service.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-7136

Affected Products

Icqtoolbar

References · 4

• 🔥 http://securiteam.com/exploits/5WP0115NPU.html · Exploit
• 🔥 https://exploit-db.com/exploits/5217 · Exploit
• 🔥 http://securityfocus.com/bid/28118 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7136 · Security Note