605 matches found
Gaim AIMICQ Protocols - Multiple Vulnerabilities
Gaim AIMICQ Protocols - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions ...
Gaim AIM/ICQ Protocols - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/14531/info Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition. All versions of Gaim 1.x are considered vulnerable at the...
PT-2005-3043 · Gaim +1 · Gaim +1
Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...
CVE-2002-1813
Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...
CVE-2002-1953
The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...
KLA10048 DoS vulnerability in AOL AIM
An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...
CVE-2005-1891
The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...
CVE-2005-1891
Summary : CVE-2005-1891 affects AOL Instant Messenger (AIM) versions 5.9.3797 and earlier. The issue stems from the GIF parser in the ateimg32.dll component, where processing a specially crafted buddy icon can trigger an integer underflow in a loop counter, enabling a remote denial of service (cr...
CVE-2004-2031
Cross-site scripting XSS vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 MSN, or 3 AIM fields...
CVE-2004-2031
The CVE-2004-2031 entry concerns the e107 CMS: a Cross-site Scripting (XSS) vulnerability in the file user.php that allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields. The recorded impact is partial integrity compromise with no confidentiali...
PT-2005-2453 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue affects multiple dissectors in Ethereal, including AIM, LDAP, FibreChannel, GSM MAP, SRVLOC, and NTLMSSP. These vulnerabilities allow remote attackers to cause a denial of service,...
CVE-2005-0874
Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...
ICUII 7.0 - Local Password Disclosure
/ ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions Procuder: Cybration - www.icuii.com Vulnerable Description: ICUII 7.0 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...
CVE-2005-0874
The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...
CVE-2001-1416
The CVE-2001-1416 entry concerns multiple cross-site scripting (XSS) vulnerabilities in the log messages of certain Alpha versions of AOL Instant Messenger (AIM) 4.4. The vulnerability allows remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) ...
CVE-2001-1418
CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...
CVE-2001-1421
AOL Instant Messenger (AIM) versions up to 4.7 are affected. The vulnerability arises when processing a benign-looking input consisting of a large number of different fonts followed by an HTML HR tag, which can trigger a remote denial of service resulting in an application crash. The affected pro...
CVE-2001-1419
The CVE-2001-1419 entry concerns AOL Instant Messenger (AIM) versions 4.7.2480 and earlier. The vulnerability arises when processing an instant message containing a large amount of HTML comments "
CVE-2001-1417
CVE-2001-1417 affects AOL Instant Messenger (AIM) 4.7. An attacker can trigger a denial of service by sending a buddy icon GIF where the length/width values exceed the actual image data, causing the application to hang or crash. The available sources (NVD/CVE records) describe the impact as a DoS...
