What’s Vulnerable › Vulnerabilities

CVE-1999-1289

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1998-11-11 · updated 2026-06-16

Description

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.

Affected products

• Mirabilis Icq: 98_beta

References

• http://www.securityfocus.com/archive/1/11233
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1398
• http://www.securityfocus.com/archive/1/11233
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1398

Get alerted when CVE-1999-1289 or the next vulnerability affects your stack