CVE-2002-1485

The CVE-2002-1485 entry concerns the AIM component of Trillian versions 0.73 and 0.74. A remote attacker can cause a denial of service (crash) by sending certain strings (e.g., "P > O

CVE-2002-1485

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

CVE-2002-1485: Undefined Security Weakness

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

Trillian Remote DoS Attack - AIM

Advisory Url: http://www.computersecuritynow.com/modules.php?op=modload&name=News&file=article&sid=817&mode=thread&order=0&thold=0 ComputerSecurityNow Advisory Sep 23 2002 Trillian Remote DoS Attack - AIM Spikeman - spikeman at computersecuritynow dot com http://www.computersecuritynow.com/ Thank...

CVE-2002-0592

CVE-2002-0592 affects AOL Instant Messenger (AIM). The vulnerability allows remote attackers to steal files being transferred to other clients by connecting to AIM’s Direct Connection port 4443 or file transfer port 5190 before the intended user. The available sources describe this as a scheme to...

CVE-2002-0591

CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...

CVE-2002-0591: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

AOL Instant Messenger vulnerable to denial-of-service attack via buddy list transfers

Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a program for communicating with other users over the Internet and is widely used. During a buddy list transfer, a buffer overflow may occur. It has...

File send interception in AIM

Durig file trasmitio icomig connection is accepted without additioal user or IP validation...

AIM Remote File Transfer/Direct Connection Vulnerability

AIM Remote File Transfer/Direct Connection Vulnerability I Discovered this vulnerability while I was port scanning my brotherApril 15th, 2002, he just happened to send me a file and the port scan connected and received the file instead of me... The next dayApril 16th, 2002 I made a program to...

Directory traversal in AIM direct conect

During direct connect it's possible to send a file with a name containing "../"...

AIM's 'Direct Connection' feature could lead to arbitrary file creation

AIM's 'Direct Connection' feature could lead to arbitrary file creation ---------------------------------------------------------------------- - Author: Noah Johnson [email protected] Affected versions: All versions of AOL Instant Messenger up to 4.8 beta on all platforms of Windows as far as I...

AOL Instant Messenger 4.x - Arbitrary File Creation

AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...

AOL Instant Messenger 4.x - Arbitrary File Creation

source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that are sent to a user include an img tag and a data ta...

AOL Instant Messenger contains buffer overflows in parsing of AIM URI handler requests

Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A buffer overflow vulnerability exists that can manipulate the configuration of the victim's client. Description AIM installs a URI handler that permits the use of the "aim:" protocol on the...

CVE-2002-0005

CVE-2002-0005 describes a remote buffer overflow in AOL Instant Messenger (AIM) on Windows triggered by a crafted AddGame request, allowing arbitrary code execution. Vulnerable AIM Windows clients include versions 1.0–3.0.1415 and 4.3.2229+ (4.8.2616 cited); the issue involves parsing a long argu...

CVE-2002-0005: Undefined Security Weakness

Buffer overflow in AOL Instant Messenger AIM 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request AddGame...

AIM including the beta 4.8.2646 Local/Remote Buffer Oveflow

.--------. / Bugs +-----------------------------------------------------------------------. : Affected : All versions of AIM including the beta 4.8.2646 : Type : Local/Remote Buffer Oveflow : Date : 29-02-2002 : Author : NtWaK0 & Recon @ www.SafeHack.com :...

CVE-2000-1000

Summary: CVE-2000-1000 is a format-string vulnerability in AOL Instant Messenger (AIM) 4.1 and earlier. The issue arises when transferring a file whose name contains format specifiers, which can cause a denial of service and may allow arbitrary command execution. Root cause: format-string handlin...

CVE-2000-1094

Affected software: AOL Instant Messenger (AIM) prior to version 4.3.2229. Vulnerability: A buffer overflow in the handling of the buddyicon command with a long src argument can allow a remote attacker to execute arbitrary commands on the victim’s machine. Root cause: Buffer overflow when processi...