[ADVISORY] AOL Instant Messenger DoS

Note: I wasn't going to release this until the 8th in order to give AOL some time to release a fix/workaround, but since exploit scripts have already been posted to bugtraq... Scope: Anyone who can send instant messages to a user signed on to the AOL Instant Messenger service can crash that user'...

DoS против AOL Instant Messanger

Большое количествео открытых HTML-комментариев !-- в теле сообщения приводят к выходу за границы массива...

CVE-2001-1419

AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...

Дырка в AOL Instant Messenger

При некоторых условиях на компьютере клиента может быть выполнен Javascript/VBScript...

Modifed images can lead to JavaScript/VBScript execution in AIM

Software Effected: AOL Instant Messenger Versions Effected: 4.1 to current including 4.4 alpha, older versions probably effected Details: AOL Instnat Messenger has the ability to embed images into an instant message. The user sends the graphic to the person they wish to show, and the graphic show...

CVE-2000-1000

Summary: CVE-2000-1000 is a format-string vulnerability in AOL Instant Messenger (AIM) 4.1 and earlier. The issue arises when transferring a file whose name contains format specifiers, which can cause a denial of service and may allow arbitrary command execution. Root cause: format-string handlin...

CVE-2000-1094

Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...

CVE-2000-1094

Affected software: AOL Instant Messenger (AIM) prior to version 4.3.2229. Vulnerability: A buffer overflow in the handling of the buddyicon command with a long src argument can allow a remote attacker to execute arbitrary commands on the victim’s machine. Root cause: Buffer overflow when processi...

CVE-2000-1000

Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...

CVE-2001-1416

Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...

CVE-2000-1094

Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...

CVE-2000-1093

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...

CVE-2000-1093

AOL Instant Messenger contains buffer overflow vulnerabilities in the AIM URI handler and command-line/URI parsing that can be triggered by a long goim/aim request, allowing remote execution of arbitrary commands on affected clients. The issue affects AIM before 4.3.2229; exploitation can crash t...

CVE-2000-1093

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...

Administrivia & AOL IM Advisory

At least another author of security bulletins decided to go a similar route as Microsoft did with their email security notices. Last week @Stake, the company that acquired the L0pht, posted to the list a security notice that consisted of a title, affected products, a link to their web advisory an...

AOL Instant Messenger 3.5.18564.04.1.20104.2.1193 - aim: Remote Buffer Overflow

AOL Instant Messenger 3.5.18564.04.1.20104.2.1193 - aim: Remote Buffer Overflow source: https://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system s...

AOL Instant Messenger 4.0/4.1.2010/4.2.1193 - BuddyIcon Buffer Overflow

source: https://www.securityfocus.com/bid/2122/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim:// urls to the AIM client. There exist...

AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim:// urls to the AIM client. There exist...

AOL Instant Messenger 4.04.1.20104.2.1193 - BuddyIcon Buffer Overflow

AOL Instant Messenger 4.04.1.20104.2.1193 - BuddyIcon Buffer Overflow source: https://www.securityfocus.com/bid/2122/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the...

CVE-2000-1000

Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...