CVE-1999-1289: ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packe...

Security readout for executives and security teams

This is an old information-disclosure issue in ICQ 98 beta on Windows NT. The client may reveal a user’s internal IP address in network traffic, exposing internal network details that NAT would normally hide. The source bundle provides no CVSS score, active exploitation evidence, or confirmed fix. Exposure appears limited to legacy environments running ICQ 98 beta on Windows NT. Modern organizations are unlikely to be affected unless old systems, archived workstations, or unmanaged legacy communication software remain connected. Treat as low priority for most environments, but verify legacy exposure. If affected systems still exist, removal is preferable because the software is obsolete and the sources provide no modern remediation path. Mitigation focus: Inventory for ICQ 98 beta on Windows NT systems.; Remove or replace the legacy ICQ beta client where found.; Check vendor or archival guidance before assuming any patch exists..

Prepared

Jul 1, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.