Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerab...

[Full-disclosure] Rediff Bol 7.0 WAB Contacts

Rediff Bol 7.0 WAB Contacts Affected Program : Rediff Bol 7.0 It is a popular instant messenger from Rediff.com Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability Description : Rediff Bol's ActiveX control Fetch.FetchContact.1 / Fetch.dll allows a...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script var Obj = new...

IndiaTimes Instant Messenger ActiveX RenameGroup Function Overflow

Binary data 3199.prm...

CVE-2004-2373

Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.

CVE-2004-2373

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

Multiple MindAlign instant messenger vulnerabilities

Information leak, authentication bypass, crossite scripting, weak encryption, DoS...

Critical: Red Hat Security Advisory: gaim security update

An updated gaim package that fixes a buffer overflow security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Instant Messaging client. A heap based buffer overflow issue was discovered in the way Gai...

Gaim instant messenger buffer overflow

Buffer overflow on away message displaying...

Trillian instant messenger cleartext passwords leak

Yahoo Mail passwords are stored in common place with in cleartext...

Debian DSA-767-1 : ekg - integer overflows

Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...

[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library

Gentoo Linux Security Advisory GLSA 200507-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Debian DSA-760-1 : ekg - several vulnerabilities

Several vulnerabilities have been discovered in ekg, a console Gadu Gadu client, an instant messaging program. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1850 Marcin Owsiany and Wojtek Kaniewski discovered insecure temporary file creatio...

[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...

DSA-760-1 ekg - several

Bulletin has no description...

[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux

ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...

Debian DSA-734-1 : gaim - denial of service

Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1269 A malformed Yahoo filename can result in a crash of the application. - CAN-2005-1934 A...

DSA-734-1 gaim - denial of service

Bulletin has no description...

CVE-2002-1953

The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...