CVE-2005-2597

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program...

CVE-2005-2597

CVE-2005-2597 concerns AOL Client Software 9.0, where insecure permissions on the installation path allow a local user to replace ACSD.exe with a malicious program, enabling arbitrary code execution with SYSTEM privileges. The vulnerability is local in scope and hinges on insufficient protection ...

CVE-2005-2597: Undefined Security Weakness

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program...

CVE-2004-2373

Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.

CVE-2004-2373

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

CVE-2004-2373: Undefined Security Weakness

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

CVE-2002-1953

Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...

CVE-2002-1953

The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

CVE-2002-1953: Undefined Security Weakness

Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...

CVE-2002-1813: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link...

CVE-2002-1743

AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service crash via a malformed .hpf file...

CVE-2002-1743

Technical details about CVE-2002-1743 are not provided in the supplied documents. No concrete information on affected components or impact is available here; monitor for updates.

CVE-2002-1743: Undefined Security Weakness

AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service crash via a malformed .hpf file...

CVE-2005-2004

Multiple cross-site scripting vulnerabilities in Ultimate PHP Board UPB 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ref parameter to login.php, 2 id or 3 page parameter to viewtopic.php, id parameter to 4 profile.php, 5 newpost.php, 6 email.php, ...

CVE-2005-1891

The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...

KLA10048 DoS vulnerability in AOL AIM

An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...

CVE-2005-1891

Summary : CVE-2005-1891 affects AOL Instant Messenger (AIM) versions 5.9.3797 and earlier. The issue stems from the GIF parser in the ateimg32.dll component, where processing a specially crafted buddy icon can trigger an integer underflow in a loop counter, enabling a remote denial of service (cr...

AIM Buddy Icon Overflow Vulnerability

According to the Windows registry, the version of AOL Instant Messenger install on the remote host has an integer overflow in its GIF parser, 'ateimg32.dll'. Using a specially crafted GIF file as a buddy icon, an attacker can reportedly crash the affected host. C Tenable Network Security, Inc...

CVE-2005-1891: Integer Underflow (Wrap or Wraparound)

The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...