DSA-1433-1 centericq - buffer overflow

Bulletin has no description...

Gadu-Gadu instant messenger buffer overflow

Buffer overflows on emotion icons parsing...

CVE-2002-2361

The vulnerability CVE-2002-2361 affects Yahoo! Messenger installers (versions 4.0, 5.0, 5.5). The root cause is that the installer does not verify package signatures, allowing a remote attacker to substitute a trojan-laden package via DNS spoofing. Practical impact is installation of unauthentica...

CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

CVE-2003-1503

Affected software: AOL Instant Messenger (AIM) 5.2.3292. Vulnerability: Buffer overflow in handling an aim:getfile URL with a long screen name. Impact: Allows remote attackers to execute arbitrary code. Root cause: Buffer overflow in AIM’s URL handling/ascii processing (per available reports). Re...

Miranda instant messenger multiple security vulnerabilities

Yahoo! messenger plugin multiple buffer overflows...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...

On Yahoo! Messenger 0day exploit ideas-vulnerability warning-the black bar safety net

This vulnerability exposure also have a couple of weeks, the official date has not out patch. Test procedure: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Vulnerability description Yahoo Messenger is a very popular instant messaging tool. Yahoo Messenger of the CYFT ActiveX control is...

Yahoo! Messenger ActiveX Control YVerInfo.dll Buffer Overflow (CVE-2007-4515)

Yahoo! Messenger is a popular advertisement-supported instant messaging client. A buffer overflow vulnerability exists in Yahoo! Messenger. The vulnerability is due to a boundary error within the Yahoo! Messenger YVerInfo.dll ActiveX control when handling certain methods. To trigger this issue, a...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll 'Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll MSFLICENSE,...

Buffer overflow

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

CVE-2007-5144

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

CVE-2007-5144

CVE-2007-5144: A buffer overflow in the GDI engine of Windows Live Messenger (MSN Live 8.1) could be triggered by placing a malformed file in a new folder under the Sharing Folders path and triggering a synchronize operation. The issue allows user-assisted remote attackers to cause a denial of se...

CVE-2007-5144

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

CVE-2007-5124

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...

CVE-2007-5124

CVE-2007-5124 concerns AOL AIM 6.5.3.12 and earlier, where an embedded Internet Explorer server control in the AIM client renders HTML content from IM messages without proper sanitization, enabling remote code execution. The root cause relates to inadequate handling of mshtml-based HTML/JS in mes...

KLA10047 ACE vulnerability in AOL AIM

Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message. Original...

windowslive-remote.txt

Windows live Messenger malformed file overflow remote exploitation. windows ole32.dll ms07-024 windows GDI MS07-046 vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview Advisore: http://lostmon.blogspot.com/2007/09/ windows-live-messenger-jpg-overflow.html Vendor...

CVE-2007-5017

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method...