356 matches found
AOL Instant Messenger URL refresh Tag XSS
Binary data 1247.prm...
AOL Instant Messenger IMG Tag Arbitrary Command Execution
Binary data 1251.prm...
AOL Instant Messenger <= 4.3.2229 Multiple Overflows
Binary data 1253.prm...
AOL Instant Messenger Multiple DoS
Binary data 1252.prm...
AOL Instant Messenger AIM ""Away"" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
AOL Instant Messenger AIM "Away" Message Local Exploit
Exploit for unknown platform in category local exploits ====================================================== AOL Instant Messenger AIM "Away" Message Local Exploit ====================================================== / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve...
AOL Instant Messenger AIM - Away Message Local Overflow
AOL Instant Messenger AIM - Away Message Local Overflow / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied,...
AOL Instant Messenger AIM - 'Away' Message Local Overflow
/ subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url. offsets are based on exe/dll provide...
CVE-2004-0636
CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...
CVE-2004-0636
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger AIM 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message...
AOL Instant Messenger vulnerable to buffer overflow
Overview A vulnerability in the AOL Instant Messenger AIM client could allow a remote attacker to execute arbitrary code on a victim system. Description AOL Instant Messenger AIM is an instant messaging system distributed by AOL Time Warner. A buffer overflow error exists in the way that some...
AOL Instant Messenger buffer overflow
Buffer overflow in aim:goaway URI handler...
[Full-Disclosure] iDEFENSE Security Advisory 08.09.04: AOL Instant Messenger aim:goaway URI Handler Buffer Overflow Vulnerability
AOL Instant Messenger aim:goaway URI Handler Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.09.04 www.idefense.com/application/poi/display?id=121&type=vulnerabilities August 9, 2004 I. BACKGROUND AOL Instant Messenger is an instant messaging client developed by America Online. II...
Mandrake Linux Security Advisory : gaim (MDKSA-2004:006-1)
A number of vulnerabilities were discovered in the gaim instant messenger program by Steffan Esser, versions 0.75 and earlier. Thanks to Jacques A. Vidrine for providing initial patches. Multiple buffer overflows exist in gaim 0.75 and earlier: When parsing cookies in a Yahoo web connection; YMSG...
Gaim contains a buffer overflow vulnerability in the gaim_quotedp_decode() function
Overview There is a buffer overflow vulnerability in the Gaim gaimquotedpdecode function, which could cause a pointer to reference memory beyond the terminating null byte. Description Gaim is a multi-protocol instant messenger available for a number of operating systems. It includes a feature tha...
Trillian Pro < 2.01 - Design Error
Trillian Pro Design Error Vendor: Cerulean Studios Product: Trillian Pro Version: !-- var username; username='plaintextusernamehere'; var password; password='plaintextpasswordhere'; function submit document.getElementById'login'.value=username; d...
Trillian DirectIM Packet Remote Overflow
An integer buffer overflow exists in the AOL Instant Messenger AIM component of the version of Trillian instant messaging client installed on the remote host. By sending a DirectIM packet with a size above 8k bytes, a remote attacker can potentially execute code on the affected host subject to th...
AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location
AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks...
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to execution of arbitrary code. This iss...
Microsoft ASN.1 Library Length Integer Mishandling Memory Corruption Vulnerability
Description A vulnerability has been reported in the Microsoft ASN.1 library. This issue is related to insufficient checking of data supplied via an externally supplied length field in ASN.1 BER encoded data. This could result in an excessive value being used in a heap allocation routine, allowin...