CVE-2001-1418

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

CVE-2001-1420

CVE-2001-1420 affects AOL Instant Messenger (AIM) 4.7. The vulnerability is a denial of service caused by processing a long filename, likely due to a buffer overflow in the file/name handling path, which can crash the application when a crafted filename is encountered. The exposed impact is a loc...

CVE-2001-1416

Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

CVE-2002-1591

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...

Gaim vulnerable to HTML processing denial of service

Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...

CVE-2004-1555

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...

CVE-2004-1555

CVE-2004-1555 affects BroadBoard Instant ASP Message Board. The description documents multiple SQL injection flaws in the application, exploitable via specific parameters: keywords in search.asp, handle in profile.asp, txtUserHandle in reg2.asp, and txtUserEmail in forgot.asp. The underlying issu...

CVE-2004-1555

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...

CVE-2004-2373

The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...

Gadu-Gadu Remote DoS (all versions)

Product: Tlen.pl = 5.23.4.1 Vendor: o2.pl Sp. z o.o. http://www.tlen.pl/ Impact: Remote script execution Severity: High Authors: Blazej Miga [email protected], Jaroslaw Sajko [email protected] Date: 20/12/04 ISSUE Tlen.pl is the instant messenger application used by more than 700 000 users. The...

Gadu-Gadu 6.0 - URL Parser JavaScript Cross-Site Scripting

source: https://www.securityfocus.com/bid/11998/info Multiple remote vulnerabilities reportedly affect Gadu-Gadu instant messenger. It supports the DCC Direct Client Connection protocol, facilitating the transfer of files and messages between users. The input validation issue is an HTML injection...

CVE-2004-0939

changepassword.cgi in Neoteris Instant Virtual Extranet IVE 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack...

AOL Instant Messenger AIM ""Away"" Message Remote Exploit

No description provided by source. / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others...

AOL Instant Messenger AIM - Away Message Remote (2)

AOL Instant Messenger AIM - Away Message Remote 2 / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a coup...

AOL Instant Messenger AIM - 'Away' Message Remote (2)

/ CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a couple others versions... If you want to try other...

CVE-2002-0362

Buffer overflow in AOL Instant Messenger AIM 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711...

CVE-2002-0362

CVE-2002-0362: A buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote code execution via a long AddExternalApp request using a TLV type greater than 0x2711. Vulnerable component: AIM client input handling for AddExternalApp TLV. Exploit scenario: remote attacker sends crafte...

GLSA-200401-04 : GAIM 0.75 Remote overflows

The remote host is affected by the vulnerability described in GLSA-200401-04 GAIM 0.75 Remote overflows Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team released a rushed release solving this issue, however, at the same time a code audit revealed...

Gaim: New vulnerabilities

Background Gaim is a multi-protocol instant messaging client for Linux which supports many instant messaging protocols. Description Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname...