CVE-2001-1421

AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...

CVE-2001-1418

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...

CVE-2001-1417

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

CVE-2001-1419

AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...

CVE-2005-0737

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...

CVE-2002-1591

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...

CVE-2005-0737

CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...

[Full-disclosure] Yahoo! Messenger Offline Mode Status Remote Buffer Overflow Vulnerability

It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. It is likely that the attacker must be in the contact list of an unsuspecting user to...

Yahoo Messenger Instang messaging agent buffer overflow

Buffer overflow during offline status message displaying...

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow source: https://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied inp...

Yahoo! Messenger < 6.0.0.1921 Multiple DoS

Binary data 2681.prm...

Yahoo! Messenger 5.x/6.0 - Offline Mode Status Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. It is likely that the attacker must b...

gaim instant messanger DoS

Application crashes on receiving file with with parenthesis in the name and during HTML parsing...

Yahoo! Messenger < 6.0.0.1750 Detection

Binary data 2630.prm...

CVE-2004-1574

Vypress Messenger 3.5.1 and earlier contains a buffer overflow in the first field of a message that allows remote code execution. The issue is documented under CVE-2004-1574; exploitation details are not provided in the supplied documents. Affected version range is explicitly stated as 3.5.1 and ...

CVE-2004-1574

Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field...

[VulnWatch] Secunia Research: Yahoo! Messenger Audio Setup Wizard Privilege Escalation

====================================================================== Secunia Research 18/02/2005 - Yahoo! Messenger Audio Setup Wizard Privilege Escalation - ====================================================================== Table of Contents Affected...

[VulnWatch] Secunia Research: Yahoo! Messenger File Transfer Filename Spoofing

====================================================================== Secunia Research 18/02/2005 - Yahoo! Messenger File Transfer Filename Spoofing - ====================================================================== Table of Contents Affected...

Yahoo messenger multiple security vulnerabilities

Filename spoofing, local privilege escalation with Audio Setup Wizard...

CVE-2005-0242

The Audio Setup Wizard asw.dll in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions...