Yahoo! Messenger 5.6 YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10199/info Yahoo! Messenger COM objects YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2 have been reported prone to remotely exploitable buffer overflow vulnerabilities. The conditions are triggered when...

Secure Network Messenger <= 1.4.2 - Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print \nSecure Network Messenger Crasher by ClearScreen\n; print \nEnter host to crash: ; $h = STDIN; chomp $h; $socks = IO::Socket::INET-new Proto = tcp, PeerPort = 6144, PeerAddr = $h or die \nNo response from host.; sleep 1; pri...

V3 Chat Instant Messenger - online.php site_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Yahoo! Messenger 8.0.0.863 File Extension Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users...

Novell GroupWise Messenger 2.0 - Client Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29602/info Novell GroupWise Messenger is prone to two buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can explo...

AOL Instant Messenger goaway Overflow

No description provided by source. $Id: aimgoaway.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JE Messenger 1.0 - Arbitrary File Upload Vulnerability

No description provided by source. JE Messenger 1.0 Arbitrary File Upload Vulnerability Name JE Messenger Vendor http://joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-12-...

Yahoo! Messenger <= 8.0 Notification Message HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Sun Java System 6.x Messenger Express Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Rediff Bol 7.0 Instant Messenger ActiveX Control Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script v...

Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflow

No description provided by source. $Id: yahoomessengerserver.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

iPlanet Messaging Server Messenger Express Expression() HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary...

AOL Instant Messenger 4.8.2790 Local File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files to a user of the...

AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 'aim://' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim://...

Pidgin MSN <= 2.5.8 - Remote Code Execution Exploit

No description provided by source. / Pidgin MSN = 2.5.8 Remote Code Execution Pierre Nogues - [email protected] http://www.indahax.com/ Description: Pidgin is a multi-protocol Instant Messenger. This is an exploit for the vulnerability1 discovered in Pidgin by core-security2. The library libmsn us...

Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...

Indiatimes Messenger 6.0 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14705/info Indiatimes Messenger is reported prone to a remote buffer overflow vulnerability. A successful attack may trigger a crash in the client or lead to arbitrary code execution. The attacker may then gain unauthoriz...

LAN.FS Messenger 2.4 - Command Execution Vulnerability

No description provided by source...

Microsoft Internet Explorer 5 Shell: IFrame Cross-Zone Scripting Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to ho...

Microsoft MSN Messenger 1-4 Malformed Invite Request Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/4827/info Microsoft's MSN Messenger is an instant messenging client for Windows based machines, based on the Passport system. A vulnerability has been reported in some versions of MSN Messenger. Under some circumstances, ...