miranda_popupplus_overflow.txt

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

CVE-2005-0562

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

CVE-2005-0562

The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...

MSN Messenger GIF file buffer overflow

Buffer overflow on GIF files parsing...

Microsoft Security Bulletin MS05-022 Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

Microsoft Security Bulletin MS05-022 Vulnerability in MSN Messenger Could Lead to Remote Code Execution 896597 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use MSN Messenger Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critica...

CVE-2005-0562

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

MSN Messenger Malformed GIF Remote Overflow (deprecated)

Binary data 2817.prm...

Microsoft MSN Messenger GIF Image Processing Remote Buffer Overflow Vulnerability

Description Microsoft MSN Messenger is prone to a remote buffer-overflow vulnerability when handling malformed Graphic Interchange Format GIF images. This may allow an attacker to gain unauthorized access to an affected computer by executing arbitrary code, reportedly resulting in system-level...

Microsoft MSN Messenger GIF processing buffer overflow

Overview MSN Messenger clients before version 7.0 will allow remote attackers to take control of a computer if malicious GIF files are processed. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with people using text messages, voice and vid...

MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)

The remote host is running MSN Messenger. The version of MSN Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles GIF files with height and width fields. An attacker may exploit this vulnerability to execute arbitrary code on the remote host. C Tenable...

[Full-disclosure] PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

Gaim < 1.2.1 Multiple Vulnerabilities

Binary data 2793.prm...

Multiple Trillian instant messenger buffer overflows

Multiple buffer overflow on parsing HTTP-based protocols, including RSS...

CVE-2001-1420

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a long filename, possibly caused by a buffer overflow...

CVE-2001-1416

The CVE-2001-1416 entry concerns multiple cross-site scripting (XSS) vulnerabilities in the log messages of certain Alpha versions of AOL Instant Messenger (AIM) 4.4. The vulnerability allows remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) ...

CVE-2001-1416

Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...

CVE-2001-1420

CVE-2001-1420 affects AOL Instant Messenger (AIM) 4.7. The vulnerability is a denial of service caused by processing a long filename, likely due to a buffer overflow in the file/name handling path, which can crash the application when a crafted filename is encountered. The exposed impact is a loc...

CVE-2001-1418

CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...

CVE-2001-1417

CVE-2001-1417 affects AOL Instant Messenger (AIM) 4.7. An attacker can trigger a denial of service by sending a buddy icon GIF where the length/width values exceed the actual image data, causing the application to hang or crash. The available sources (NVD/CVE records) describe the impact as a DoS...

CVE-2001-1419

The CVE-2001-1419 entry concerns AOL Instant Messenger (AIM) versions 4.7.2480 and earlier. The vulnerability arises when processing an instant message containing a large amount of HTML comments "