605 matches found
CVE-2002-1591
AOL Instant Messenger AIM 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions...
CVE-2002-1591
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...
CVE-2004-1716
CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...
CVE-2005-0472
Gaim (GAIM) before 1.1.3 is CERTified vulnerable to remote DoS via specially malformed SNAC packets from AIM/ICQ. The issue stems from SNAC packet processing that can trigger an infinite loop, causing the client to become unresponsive. Public reports reference CVE-2005-0472 (and related CAN/CVE m...
CVE-2005-0472
Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...
gaim -- AIM/ICQ remote denial of service vulnerability
The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to freeze: Certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim when parsing the SNAC. The remote user would need a custom client, able to generate...
CVE-2004-0636
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger AIM 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message...
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
AOL Instant Messenger AIM "Away" Message Remote Exploit
Exploit for unknown platform in category remote exploits ======================================================= AOL Instant Messenger AIM "Away" Message Remote Exploit ======================================================= / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by...
GLSA-200406-01 : Ethereal: Multiple security problems
The remote host is affected by the vulnerability described in GLSA-200406-01 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make...
AOL Instant Messenger URL refresh Tag XSS
Binary data 1247.prm...
CVE-2004-0505
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
CVE-2004-0636
CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...
AOL Instant Messenger buffer overflow
Buffer overflow in aim:goaway URI handler...
Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
security flaw
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
CVE-2004-0505
CVE-2004-0505 affects Ethereal (Wireshark) with the AIM dissector. The advisory notes that Ethereal versions prior to the fixed release (e.g., 0.10.x up to 0.10.3) are vulnerable and can trigger an assertion error leading to a denial of service. The OpenVAS/Gentoo/GNU advisories corroborate a vul...
PT-2004-1619 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service via unknown attack vectors in the AIM dissector. Recommendations: For Ethereal version 0.10.3, at the moment, there is no information about a...