CVE-2006-0629

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

Default credentials

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

CVE-2006-0363

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

CVE-2006-0363

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

CVE-2006-0363

MSN Messenger 7.5 stores passwords in an encrypted form under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds. Local users may recover originals by calling CryptUnprotectData (as demonstrated by the MSN Password Recovery.exe tool). The issue highlights that decryption methods and keys resi...

CVE-2006-0138

CVE-2006-0138 affects amsn (Alvaro’s Messenger). The vulnerability allows remote attackers to trigger a denial-of-service by repeatedly sending crafted data to the default file-transfer port (TCP 6891), causing the client to hang and terminate the instant-messaging session. Publicly documented im...

NEW BUG DOS IN AMSN

Advisory 2 H/ Tittle: AMSN MESSENGER SEND FILE REMOTE DENIAL OF SERVICE 4/ Author: Red-Point x/ Contact: [email protected] 0/ Date: Sunday, december 28, 2005 r/ Risk: Medium / Vendor URL: http://amsn.sourceforge.net/...

[Full-disclosure] Gadu-Gadu several vulnerabilities (version <= 7.20)

21/11/05 Gadu-Gadu instant messenger several vulnerabilities I. INTRODUCTION During the preparation of the materials about instant messengers security for the security conference we have checked current state of the Gadu-Gadu http://www.gadu-gadu.pl security. There was discovered a several new...

Multiple Gadu-Gadu instant messenger vulnerabilities

Special device access, buffer overflow, DoS, ability to initiate voice transfer from the client without user intervation...

CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...

MSN Messenger8. 0 login method decrypt-vulnerability warning-the black bar safety net

Earlier, Microsoft had announced will be on MSN Messenger to make some changes, upgrade to Windows Live Messenger 8.0, and will demo some of the new features. The new version of the picture already from Bill Gates earlier demo version leaked to the Internet. Today we've got MSN Live Messenger8. 0...

AOL Instant Messenger is Installed

The remote host is using AOL Instant Messenger AIM. AIM has been associated with multiple security vulnerabilities in the past. This software is not suitable for a business environment. OpenVAS Vulnerability Test $Id: aolinstalled.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: AOL Instant...

Buffer Overrun in Messenger Service (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. An attacker who successfully exploited this vulnerability could be able to run code with Local System privileges on an affected system, or could cause the Messenger Service to...

Buffer Overrun in Messenger Service (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. This plugin determined by reading the remote registry that the patch MS03-043 has not been applied. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be...

Yahoo Messenger/Pager DoS Vulnerability

Yahoo Messenger or Pager is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trillian instant messenger DoS

DoS on requesting ICQ protocol reverse connection...

CVE-2005-3114

Buffer overflow in the ActiveX control for NateOn Messenger NateonDownloadManager.ocx allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long third argument to the GotNate.Excute method...

CVE-2005-3113

The ActiveX control for NateOn Messenger NateonDownloadManager.ocx allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method...

CVE-2005-3114

CVE-2005-3114 describes a buffer overflow in the NateOn Messenger ActiveX control (NateonDownloadManager.ocx) that allows remote attackers to crash the application and potentially execute arbitrary code via a long third argument to the GotNate.Excute method. The vulnerability affects the ActiveX ...

CVE-2005-3113

CVE-2005-3113 affects NateOn Messenger: the ActiveX control NateonDownloadManager.ocx lets remote attackers set arguments to GotNate.Excute to download and run arbitrary programs. The impact is remote code execution on the vulnerable host; exploitation status and concrete mitigations are not deta...