In all versions of ICQ prior to 2001B, the vulnerable code is a part of the program, though in 2001B and later versions, the vulnerable code has been moved into a plug-in, CERT said. ICQ is vulnerable to a buffer overflow attack in which the memory allocated to the Voice Video & Games component is overwhelmed, allowing attackers to run any code they choose on the target system, CERT said. The flaw operates in much the same way as a security hole discovered in early January in AOL’s other chat program, Instant Messenger.

The security hole in ICQ affects all versions of AOL Mirabilis ICQ prior to, and including, version 2001A as well as the Voice Video & Games plug-in installed by versions prior to 2001B Beta v5.18 Build #3659, CERT said.

federally-funded computer security organization Computer Emergency Response Team Coordination Center (CERT/CC) said in an advisory Thursday.ĪOL has fixed the flaw on its servers, but also recommends that users upgrade their ICQ program to the new version, which does not have the vulnerability, because the server fix will not solve the problem entirely, CERT/CC said. Artificial Intelligence (816) Auto Tech (33) Blockchain (152) CanadianCIO (88) Careers & Education (4419) Channel Strategy (23) Cloud (2014) Communications & Telecom (354) Companies (755) Data & Analytics (1260) Development (659) Digital Transformation (1173) Distribution (124) Diversity & Inclusion (45) Ecommerce (83) Emerging Tech (24152) End User Hardware (31) Engineering (79) Financial (117) FinTech (80) Future of Work (319) Governance (95) Government & Public Sector (6000) Human Resources (803) Infrastructure (8492) IoT (6166) it-administration (1) it-cloud (0) ITWC Morning Briefing (111) Leadership (4258) Legal (116) Legislation (129) Managed Services & Outsourcing (4302) Marketing (56) MarTech (3) Medical (19) Mobility (3416) Not For Profit (17) Open Source (27) Operations (68) People (101) Podcasts (1937) Privacy (585) Project Management (1099) Security (7602) Service (38) Smart Home (15) SMB (53) smb-leadership (1) Social Networks (160) Software (4132) Supply Chain (111) Sustainability (79) Tech in Sports (4) Women in Tech (173)Ī security hole in America Online Inc.’s ICQ chat program could allow attackers to run the code of their choice on a computer using the program, the U.S.

Icq chat server