EUVD-2001-1397

Malware in sbrugna...

CVE-2004-2373: Undefined Security Weakness

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

KLA10048 DoS vulnerability in AOL AIM

An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...

CVE-2005-1891: Integer Underflow (Wrap or Wraparound)

The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...

PT-2005-2848 · Aol · Aol Instant Messenger

Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM versions 5.9.3797 and earlier Description: The issue is related to the GIF parser in the ateimg32.dll component, which can be exploited by remote attackers to cause a denial of service crash by providing a malformed...

CVE-2001-1417: Undefined Security Weakness

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location

source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to execution of arbitrary code. This iss...

Windows AIM Client Exploits

i have generated a list of exploits that can be used to cause an illegal operation on windows aim clients 1. Comment Crash - anyone remember that neat little exploit that involved a large amount of html comment headers "!-- "? to fix it they configured the server to ignore instant messages over...

CVE-2001-1417

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...