AOL Instant Messenger (AIM) is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim.
AIM permits users to send files from one peer to another. By sending a file with a long name, it is possible to crash the client of the recipient.
By repeatedly sending this message with the file attached, a continued denial of service can be caused.
This has been resolved in AIM for Windows beta version 4.8.2540.
AIM permits the user to only accept messages from known/trusted peers. Enable this feature.
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Notified: October 17, 2001 Updated: January 14, 2002
This is fixed in our our latest Win AIM Beta 4.8.2540 posted Nov. 19th.
The vendor has not provided us with any further information regarding this vulnerability.
Win AIM Beta 4.8.2540 was posted on Nov. 19th, 2001.
If you have feedback, comments, or additional information about this vulnerability, please send us email.
Group | Score | Vector
Base | |
Temporal | |
Environmental | |
This vulnerability was discovered by Robbie Saunders.
This document was written by Jason Rafail.
CVE IDs: | None
Severity Metric: | 9.45
Date Public: | 2001-10-06
Date First Published: | 2002-01-14
Date Last Updated: | 2002-01-14 18:22 UTC
Document Revision: | 9