CVE-1999-1289

High CVSS 7.5

Published 1998-11-11 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1289, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.

Sources

NVD record for CVE-1999-1289

CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P