CVE-1999-1440

Published Sep 12, 2001 CVSS 2.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-1421 Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00489}

epss

{'score': 0.00744}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 5:11 PM
Reserved
Aug 31, 2001, 12:00 AM
Status
Modified
Published
Jan 1, 1999, 5:00 AM
Modified
Jun 16, 2026, 9:50 PM