COMMAND
ICQ
SYSTEMS AFFECTED
ICQ99a Beta
PROBLEM
Flaming Dog found following. This bug was tested on Windows 95
and with ICQ version 99a build #1700. The guess is that it
affects all versions of 99. While playing with the personal web
server that is built into ICQ99, FD just had an amazing urge to
break it. Basically, if you put 300 periods onto the end of the
address for your ICQ homepage. Example follows.
You have the ICQ webserver running and you enter
http://209.37.153.39/...................(and so on..../
into Netscape, and ICQ will crash. Another guess is that since it
crashes ICQ, but not the webserver, is that if you do the same to
the ICQ homepages that are stored on http://members.icq.com, it
will also crash. (granted they have the page stored there)
SOLUTION
ICQ99 build #1800 release supposedly fixes this DoS attack.