CVE-2009-1915: Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to c...

Security readout for executives and security teams

CVE-2009-1915 is an old ICQ 6.5 toolbar flaw that can crash Windows Explorer when a user browses a folder containing a specially crafted Internet shortcut file. The public record says arbitrary code execution may be possible, but the supplied sources do not provide a vendor fix or confirmed real-world exploitation. Exposure is likely limited to endpoints with legacy ICQ 6.5 and its toolbar component installed. Modern environments are unlikely to have this software, but older images, kiosk systems, lab machines, or unmanaged user workstations should be checked. Treat this as a legacy exposure cleanup item unless ICQ 6.5 is still present. If found, removal should be prioritized because the vulnerable component is obsolete, publicly documented, and can affect endpoint stability with possible code execution risk. Mitigation focus: Inventory endpoints for ICQ 6.5 and ICQToolBar.dll.; Remove ICQ 6.5 or the toolbar where business use is unnecessary.; Check vendor or archival guidance for any available fixed version..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.