Yahoo-ducky.txt

-Dtors Security Research- - www.dtors.net - -Package: Yahoo Messenger -Versions Affected: 5.5 -Website: http://messenger.yahoo.com -Exploit: http://www.dtors.net/exploits/ducky.c -Date: 07/05/03 -Author: [email protected] ---BACKGROUND Yahoo messenger is a world wide scale Instant Messaging client...

Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow

Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

Exploit for unknown platform in category remote exploits ================================================ Yahoo Messenger 5.5 Remote Exploit DSR-ducky.c ================================================ / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

Yahoo Messenger 5.5 - 'DSR-ducky.c' Remote Overflow

/ --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define MAXDATASIZE 555 / Max number of bytes of data /...

CVE-2003-0288

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2003-0288

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2003-0288

IP Messenger for Win suffers a filename-length buffer overflow in the file/folder transfer mechanism (versions 2.00–2.02). The overflow occurs when saving an attached file with a long name, potentially allowing arbitrary code execution with the user’s privileges. The JVN entry confirms impact as ...

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX...

CVE-2002-0032

Yahoo! Messenger 5.0.0.1064 and earlier is vulnerable to remote arbitrary-script execution via the addview parameter of the ymsgr URI. The issue stems from Yahoo! Messenger URI handling, allowing an attacker to run code with the victim’s privileges. The advisory/references indicate remediation by...

CVE-2002-0785

AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...

CVE-2002-0785

AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...

CVE-2002-0032

Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI...

Microsoft Windows Messenger Detection

Windows Messenger, an instant messaging client, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11429; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft...

Yahoo! Messenger Detection

Yahoo! Messenger, an instant-messaging application, is installed on the Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11432; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Yahoo!...

CVE-2002-1698

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via a long FN font argument in the message header...

CVE-2002-1665

Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long setbuddygrp field...

CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

CVE-2002-1664

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information...

CVE-2002-1831

Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via an invite request that contains hex-encoded spaces %20 in the Invitation-Cookie field...