AOL Instant Messenger AIM ""Away"" Message Local Exploit

No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...

AOL Instant Messenger AIM - Away Message Local Overflow

AOL Instant Messenger AIM - Away Message Local Overflow / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied,...

AOL Instant Messenger AIM "Away" Message Local Exploit

Exploit for unknown platform in category local exploits ====================================================== AOL Instant Messenger AIM "Away" Message Local Exploit ====================================================== / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve...

AOL Instant Messenger AIM - 'Away' Message Local Overflow

/ subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url. offsets are based on exe/dll provide...

CVE-2004-0636

CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...

CVE-2004-0636

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger AIM 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message...

AOL Instant Messenger vulnerable to buffer overflow

Overview A vulnerability in the AOL Instant Messenger AIM client could allow a remote attacker to execute arbitrary code on a victim system. Description AOL Instant Messenger AIM is an instant messaging system distributed by AOL Time Warner. A buffer overflow error exists in the way that some...

AOL Instant Messenger buffer overflow

Buffer overflow in aim:goaway URI handler...

[Full-Disclosure] iDEFENSE Security Advisory 08.09.04: AOL Instant Messenger aim:goaway URI Handler Buffer Overflow Vulnerability

AOL Instant Messenger aim:goaway URI Handler Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.09.04 www.idefense.com/application/poi/display?id=121&type=vulnerabilities August 9, 2004 I. BACKGROUND AOL Instant Messenger is an instant messaging client developed by America Online. II...

Mandrake Linux Security Advisory : gaim (MDKSA-2004:006-1)

A number of vulnerabilities were discovered in the gaim instant messenger program by Steffan Esser, versions 0.75 and earlier. Thanks to Jacques A. Vidrine for providing initial patches. Multiple buffer overflows exist in gaim 0.75 and earlier: When parsing cookies in a Yahoo web connection; YMSG...

RHEL 2.1 : gaim (RHSA-2002:191)

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...

Gaim contains a buffer overflow vulnerability in the gaim_quotedp_decode() function

Overview There is a buffer overflow vulnerability in the Gaim gaimquotedpdecode function, which could cause a pointer to reference memory beyond the terminating null byte. Description Gaim is a multi-protocol instant messenger available for a number of operating systems. It includes a feature tha...

Trillian Pro < 2.01 - Design Error

Trillian Pro Design Error Vendor: Cerulean Studios Product: Trillian Pro Version: !-- var username; username='plaintextusernamehere'; var password; password='plaintextpasswordhere'; function submit document.getElementById'login'.value=username; d...

Advisory 02/2004: Trillian remote overflows

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Trillian remote overflows Release Date: 2004/02/24 Last Modified: 2004/02/24 Author: Stefan Esser [email protected] Application: Trillian 0.71-0.74 w/ patch f Trillian Pro 1.0, 2.0, 2.01 Severity: 2 vulnerabilities were found in...

Trillian DirectIM Packet Remote Overflow

An integer buffer overflow exists in the AOL Instant Messenger AIM component of the version of Trillian instant messaging client installed on the remote host. By sending a DirectIM packet with a size above 8k bytes, a remote attacker can potentially execute code on the affected host subject to th...

AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location

AOL Instant Messenger 4.x5.x - Buddy Icon Predictable File Location source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks...

AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location

source: https://www.securityfocus.com/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to execution of arbitrary code. This iss...

Microsoft ASN.1 Library Length Integer Mishandling Memory Corruption Vulnerability

Description A vulnerability has been reported in the Microsoft ASN.1 library. This issue is related to insufficient checking of data supplied via an externally supplied length field in ASN.1 BER encoded data. This could result in an excessive value being used in a heap allocation routine, allowin...

DSA-434 gaim - several vulnerabilities

Bulletin has no description...

CVE-2004-0043

Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in the download feature...