Lucene search
MitreCVE-1999-1440HistorySep 12, 2001 - 4:00 a.m.
CVE-1999-1440
2001-09-1204:00:00
mitre
web.nvd.nist.gov
28
cve-1999-1440
icq 98a 1.30
file extension manipulation
malware
nvd
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.065
Percentile
93.8%
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
Affected configurations
Node
mirabilisicq_98aRange≤1.30
Related
cvelist
cvelist
CVE-1999-1440
2001-09-12 04:00:00
nvd
nvd
CVE-1999-1440
1999-01-01 05:00:00
openvas
openvas
ICQ is installed
2006-03-26 00:00:00
ICQ is installed
2006-03-26 00:00:00
nessus
nessus
ICQ < 2003b Multiple Vulnerabilities
2003-05-05 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.065
Percentile
93.8%
Related for CVE-1999-1440