ICQ Security Vulnerabilities Lead to Account Theft and Remote Code Execution
Problem
Users reported that ICQ suffers from a buffer overflow when handling passwords of 9 or more characters, allowing unauthorized login; additionally, there are remote code execution vulnerabilities and impersonation risks that enable attackers to steal accounts or send malicious messages.
Pain points
- Buffer overflow leading to password theft
- Remote code execution vulnerability allowing attacker control
- Lack of identity verification enabling message spoofing
Questions to verify
- Do you still use ICQ or similar legacy instant messaging tools?
- Have you ever experienced account theft or password leakage due to similar security vulnerabilities?
- Would you be willing to pay extra for enhanced security features in such services?
Evidence
quote · @匿名
When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.Man, computers used to be fun
quote · @匿名
So this is how my low numbered account was stolen back in the day - thanks for sharing.
Disclaimer: this card is distilled by AI from community discussions as “pain point evidence”. It is a starting point for need analysis and validation, not a “validated market need”. AI has analytical limits; please open the original discussion above to manually verify before key decisions.