CVE-2009-1915

CVE-2009-1915 describes a stack-based buffer overflow in the ICQ 6.5 URL Search Hook (ICQToolBar.dll). This vulnerability allows remote attackers to trigger a denial of service (persistent crash) and potentially execute arbitrary code by crafting a malicious Internet shortcut (.URL) file with an excessively long URL parameter. The attack is initiated when a user browses a folder containing this crafted file. The vulnerability has a CVSS score of 4.3, indicating a medium severity. It requires medium attack complexity (AC:M) and can be exploited remotely (AV:N) without authentication (Au:N), leading to a denial of service (A:P) but with no impact on confidentiality or integrity (C:N/I:N). While not listed in CISA's KEV catalog, a proof-of-concept exploit (EDB-8832) is available on ExploitDB. There is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.