18 matches found
CVE-2012-5816: Improper Input Validation
AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
PT-2012-6128
Name of the Vulnerable Software and Affected Versions AOL Instant Messenger AIM version 1.0.1.2 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...
CVE-2009-2404: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL servers to cause a denial of service application crash or possibly...
CVE-2003-1503: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in AOL Instant Messenger AIM 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name...
CVE-2007-3437: Undefined Security Weakness
AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...
CVE-2007-3350: Undefined Security Weakness
AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...
CVE-2006-0629: Undefined Security Weakness
Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...
CVE-2002-1813: Undefined Security Weakness
Directory traversal vulnerability in AOL Instant Messenger AIM 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link...
CVE-2002-1953: Undefined Security Weakness
Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...
CVE-2001-1418: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1417: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
CVE-2001-1421: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1420: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a long filename, possibly caused by a buffer overflow...
CVE-2001-1419: Undefined Security Weakness
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "...
CVE-2002-0591: Undefined Security Weakness
Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...
CVE-2002-0005: Undefined Security Weakness
Buffer overflow in AOL Instant Messenger AIM 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request AddGame...
CVE-2000-1000: Undefined Security Weakness
Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...