Check Point Advisories

Security Best Practice: Blocking ICQ

Check Point Reference:	SBP-2010-02
Date Published:	5 Jan 2010
Severity:	Medium
Last Updated:	Friday 01 January, 2010
Source:	IPS Research Center
Protection Provided by:
Who is Vulnerable?	ICQ users
Vulnerability Description	Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance. ICQ is a popular instant messaging computer program. ICQ was the first Internet-wide instant messaging services. ICQ features include sending text messages, offline support, multi-user chats, free daily-limited SMS sending, resumable file transfers, greeting cards, multiplayer games and a searchable user directory.
Vulnerability Details	Some organizations prefer to prevent their employees from using Instant Messaging applications, since many Instant Messaging applications are prone to multiple vulnerabilities. The impacts of these vulnerabilities could range from modifying data in a victim's friend list, to a denial of service attack, to the execution of malicious code on a victim's system. In addition, Instant Messaging capabilities such as file transfer are a potential source of virus and worm infections.