2382 matches found
AOL Instant Messenger 4.x - Arbitrary File Creation
source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that are sent to a user include an img tag and a data ta...
CVE-2002-1591
AOL Instant Messenger AIM 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions...
AOL Instant Messenger vulnerable to denial of service via crafted file name
Overview AOL Instant Messenger AIM 4.1 and prior are vulnerable to a denial of service vulnerability. A denial of service occurs when filenames that contain a "%s" are sent to a victim. Description AOL Instant Messenger AIM is a program for communicating with other users over the Internet. AIM...
AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser
Overview Certain Alpha versions of AOL Instant Messenger AIM, that were leaked, would log errors to a log file. By sending a crafted image file, it may be possible to execute arbitrary script/HTML on a victims browser when they view the log files. Description AOL Instant Messenger has the ability...
AOL Instant Messenger contains buffer overflows in parsing of AIM URI handler requests
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A buffer overflow vulnerability exists that can manipulate the configuration of the victim's client. Description AIM installs a URI handler that permits the use of the "aim:" protocol on the...
AOL Instant Messenger vulnerable to DoS via crafted GIF file
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM allows users to send image files to one another. By sending a crafted GIF image, an attacker can cause the victim's...
CVE-2002-0005
CVE-2002-0005 describes a remote buffer overflow in AOL Instant Messenger (AIM) on Windows triggered by a crafted AddGame request, allowing arbitrary code execution. Vulnerable AIM Windows clients include versions 1.0–3.0.1415 and 4.3.2229+ (4.8.2616 cited); the issue involves parsing a long argu...
CVE-2002-0005
Buffer overflow in AOL Instant Messenger AIM 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request AddGame...
AOL Instant Messenger 4.x - Hyperlink Denial of Service
AOL Instant Messenger 4.x - Hyperlink Denial of Service source: https://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatt...
AOL Instant Messenger 4.x - Hyperlink Denial of Service
source: https://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatted hyper-link to a user. When the user attempts to launc...
Получение пароля AOL Instant Messenger
Можно получить пароль AOL Instant Messenger создав учетную запись AOL с тем же именем...
AOL/AOL Instant Messenger Vulnerability
AOL/AOL Instant Messenger Vulnerability -------------------------------------------------------------------------------- Author: Robert Lyttle [email protected] Contributors: r0cky Release Date: 02.24.02 - 2:00 AM Disclaimer: http://www.sub-seven.com and/or Robert Lyttle is not responsible for...
yahoo messenger DOS
When adding friends to your yahoo messenger you can click a link on their profile. and it will put it in the friends group. The problem is with all versions of yahoo messenger it cannot handle long group names. So if where to visit...
Remote crashes in Yahoo messenger
All versions of Yahoo messenger version 5. Listens on port 5101 on client machine. obviously to offload server traffic for IMs problems: for all of the problems listed below, the traffic is sent to the yahoo messenger opened port, 5101 1. One can crash yahoo messenger by overflowing the message...
CVE-2002-0005
Buffer overflow in AOL Instant Messenger AIM 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request AddGame...
AOL Instant Messenger vulnerable to DoS via crafted packets
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window. Description All versions of AIM for Windows proir to beta version 4.8.2540 contain a buffer overflow that permits an attacker to cause a...
AOL Instant Messenger exposes local file path during file transfers
Overview AOL Instant Messenger AIM disclose local file paths during transfer. Description AOL Instant Messenger AIM is a program for communicating with other users over the Internet. AIM permits users to transfer files from one client to another. When the file is transferred, the entire local pat...
AOL Instant Messenger buffer overflow in screename
Overview A buffer overflow exists in the AOL Instant Messenger AIM client versions 3.5.x and prior when accepting the screenname from the command line, or through the aim protocol. Description AIM installs a protocol on the machine that enables people to post links on their websites, or send them...
AOL Instant Messenger vulnerable to buffer overflow via numerous fonts sent to client followed by < HR>
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window and in some cases the operating systemOS. Description AIM for Windows stores font names in the messages sent from one client to another. B...
AOL Instant Messenger vulnerable to DoS via crafted WAV file
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM allows users to send audio files to one another. By sending a corrupt WAV formatted file, an attacker can cause the...