CVE-2006-4662

CVE-2006-4662 describes a heap-based overflow in AOL ICQ Pro 2003b (Build 3916 and earlier) triggered in MCRegEx__Search by an inconsistent 0x2711 TLV length field in a message. The overflow occurs when a length value is used to memset a heap buffer, enabling remote code execution. Affected produ...

CVE-2006-4662: Undefined Security Weakness

Heap-based buffer overflow in the MCRegExSearch function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value TLV type...

CVE-2006-4660

Multiple cross-site scripting XSS vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer toolbaru.dll allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the 1 title and 2 description elements within an item element in an...

CVE-2006-4661: Undefined Security Weakness

AOL ICQ Toolbar 1.3 for Internet Explorer toolbaru.dll does not properly validate the origin of the configuration web page options2.html, which allows user-assisted remote attackers to provide a web page that contains disguised checkboxes that trick the user into reconfiguring the toolbar...

CVE-2006-4660: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer toolbaru.dll allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the 1 title and 2 description elements within an item element in an...

CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ AOL ICQ Pro 2003b heap overflow vulnerability Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0321 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: AOL ICQ Pr...

: AOL ICQ Pro 2003b heap overflow vulnerability

Date Published : 2006-09-07 Last Update : 2006-09-06 Advisory ID : CORE-2006-0321 Bugtraq ID : 19897 CVE Name : CVE-2006-4662 Title : AOL ICQ Pro 2003b heap overflow vulnerability Class : Boundary Error Condition Remotely Exploitable : Yes Locally Exploitable : Yes Advisory URL :...

CVE-2006-0948

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

Design/Logic Flaw

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

CVE-2006-0948

CVE-2006-0948 concerns AOL 9.0 Security Edition revision 4184.2340 (and potentially other versions) where the installer/directory permissions grant Everyone Full Control on the America Online 9.0 directory, enabling local users to replace or manipulate critical files. Root cause is insecure defau...

CVE-2006-0948

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

CVE-2006-0948: Undefined Security Weakness

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

AOL weak permissions

Application folder has Everyone:Full Control permission...

[Full-disclosure] Secunia Research: AOL Insecure Default Directory Permissions

====================================================================== Secunia Research 18/08/2006 - AOL Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

[Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)

ERNW Security Advisory 02-2006 Buffer Overflow in SIP Foundry's SipXtapi Author: Michael Thumann mthumannaternw.de Homepage: www.ernw.de 1. Summary: The sipXtapi library from sip foundry contains a buffer overflow when parsing the CSeq field. This flaw can be used by an attacker to gain control...

AOL Instant Messenger NSS Library Memory Leak Vulnerability

Description: AOL Instant Messenger AIM is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the AIM 5.9 utility. Reportedly the Network Security Services NSS library will leak 256 bytes...

Gracenote CDDB ActiveX control buffer overflow

Overview The Gracenote CDDB ActiveX control contains a buffer overflow vulnerability, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description CDDB CDDB CD Data Base is an internet database provided by Gracenote. CDDB contains track lists and other informati...

Microsoft Windows Malformed ART Image Remote Code Execution Vulnerability

Description Microsoft Windows is prone to remote code execution when processing malformed AOL ART images. This issue is exposed when the malicious images are processed by Internet Explorer or other applications that rely on Internet Explorer to display AOL ART images. If exploited, this...

Buffer overflow

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

CVE-2006-0629

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...