CVE-1999-1440
MediumExploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Win32 ICQ 98a 1.30 and possibly other versions do not display the entire portion of long filenames. This could allow attackers to send executable files with long names that contain so many spaces that the .exe extension is not displayed, potentially misleading users about the safety of the file.
Risk Assessment
Users may be at risk of opening malicious files that appear safe, which could lead to system infection or data loss.
Recommendation
It is recommended to update ICQ software to the latest version and educate users about the risks of opening files from unknown sources.
Original NVD description (English source)
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client.