CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...

CVE-2002-1831

Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via an invite request that contains hex-encoded spaces %20 in the Invitation-Cookie field...

CVE-2002-1953

Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...

CVE-2002-1698

The CVE-2002-1698 entry concerns Microsoft MSN Messenger Service versions 1.0 through 4.6. A buffer overflow vulnerability exists in the message header’s FN (font) field, allowing a remote attacker to trigger a denial of service (crash). The issue is caused by improper handling of a long font arg...

CVE-2002-1698

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via a long FN font argument in the message header...

RHEL 3 / 4 : gaim (RHSA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

gaim security update

CentOS Errata and Security Advisory CESA-2005:518 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-June/074034.html https://lists.centos.org/pipermail/centos-announce/2005-June/074035.html...

CVE-2005-1891

The GIF parser in ateimg32.dll in AOL Instant Messenger AIM 5.9.3797 and earlier allows remote attackers to cause a denial of service crash via a malformed buddy icon that causes an integer underflow in a loop counter variable...

CVE-2005-1891

Summary : CVE-2005-1891 affects AOL Instant Messenger (AIM) versions 5.9.3797 and earlier. The issue stems from the GIF parser in the ateimg32.dll component, where processing a specially crafted buddy icon can trigger an integer underflow in a loop counter, enabling a remote denial of service (cr...

PT-2005-2848 · Aol · Aol Instant Messenger

Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM versions 5.9.3797 and earlier Description: The issue is related to the GIF parser in the ateimg32.dll component, which can be exploited by remote attackers to cause a denial of service crash by providing a malformed...

AIM Buddy Icon Overflow Vulnerability

According to the Windows registry, the version of AOL Instant Messenger install on the remote host has an integer overflow in its GIF parser, 'ateimg32.dll'. Using a specially crafted GIF file as a buddy icon, an attacker can reportedly crash the affected host. C Tenable Network Security, Inc...

AOL Instant Messenger (AIM) Software Detection

AOL Instant Messenger AIM is installed on the Windows host. AIM is an instant-messaging application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18431; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01";...

AOL Instant Messenger Remote Malformed GIF DoS

Binary data 3008.prm...

AOL Instant Messenged integer overflow

Integer overflow on signed type during buffy icon GIF file parsing...

[Full-disclosure] AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS

AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS Release Date: June 6, 2005 Date Reported: June 6, 2005 Severity: Medium? if you can exploit it, email me. ;- Vendor: AOL Systems Affected: AIM 5.9.3797 for Windows 98/ME/2K/XP 5.96 MB and all prior versions. Affected Platforms: Windows...

CVE-2002-1665

Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long setbuddygrp field...

CVE-2002-1664

Yahoo! Messenger vulnerability CVE-2002-1664: Before February 2002, remote attackers could add arbitrary users to another user’s buddy list, potentially exposing sensitive information. The NVD/CVE entries describe this as a buddy-list manipulation issue with partial confidentiality risk; no expli...

CVE-2002-1664

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information...

CVE-2002-1665

CVE-2002-1665 describes a buffer overflow in Yahoo! Messenger prior to February 2002, exploitable via a long set_buddygrp field that could cause a crash and potentially allow arbitrary code execution. The affected component is Yahoo! Messenger, with the root cause being an overflow in handling th...

security flaw

Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...