CVE-2003-1503

Buffer overflow in AOL Instant Messenger AIM 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name...

CVE-2003-1503: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in AOL Instant Messenger AIM 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name...

Code injection

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...

CVE-2007-5124

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...

KLA10047 ACE vulnerability in AOL AIM

Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message. Original...

Core Security Technologies Advisory 2007.0817

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

CORE-2007-0817: Remote Command execution, HTML and JavaScript injection vulnerabilities in AOL's Instant Messaging software

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

CVE-2007-4901

Affected software: AOL Instant Messenger (AIM) family on Windows (AIM 6.1.41.2, 6.2.32.1; AIM Pro; AIM Lite). Component/causal issue: embedded Internet Explorer server control (mshtml.dll) used to render HTML in instant messages, with insufficient input sanitization of inbound HTML content. Impac...

AIM Express Client Detection

Binary data 4159.prm...

Trillian aim:// URI Handler Vulnerabilities

The version of Trillian installed on the remote host contains a buffer overflow in its AIM protocol URI handler in 'aim.dll' and also allows creation of arbitrary files with arbitrary content using specially- crafted 'aim://'' URIs. A remote attacker may be able to leverage these issues to execut...

[SECURITY] Fedora 7 Update: centericq-4.21.0-13.fc7

Centericq is a text mode menu- and window-driven IM interface that supports the ICQ2000, Yahoo!, AIM, MSN, IRC and Jabber protocols...

Design/Logic Flaw

The AOL Instant Messenger AIM protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:" substring and contains a full pathname in the ini field. NOTE: this can be...

CVE-2007-3832

Buffer overflow in the AOL Instant Messenger AIM protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///1111111/ substring...

CVE-2007-3833

The AOL Instant Messenger AIM protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:" substring and contains a full pathname in the ini field. NOTE: this can be...

CVE-2007-3833

CVE-2007-3833 affects Cerulean Trillian’s AIM protocol URI handler. A buffer overflow in the AIM URI handler (aim.dll) and the ability to create arbitrary files via crafted aim:// URIs can enable remote code execution as the current user. Impact described as launching code via startup folder writ...

CVE-2007-3833

The AOL Instant Messenger AIM protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:" substring and contains a full pathname in the ini field. NOTE: this can be...

CVE-2007-3832

The CVE-2007-3832 issue affects Trillian before 3.1.7.0, where a buffer overflow in the AIM protocol URI handler (aim.dll) can be triggered by specially crafted aim:// URIs. An unauthenticated remote attacker could potentially execute arbitrary code with the user’s privileges by convincing a user...

CVE-2007-3832

Buffer overflow in the AOL Instant Messenger AIM protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///1111111/ substring...

CVE-2007-3833: Undefined Security Weakness

The AOL Instant Messenger AIM protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:" substring and contains a full pathname in the ini field. NOTE: this can be...

CVE-2007-3832: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the AOL Instant Messenger AIM protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///1111111/ substring...