MS03-043: Buffer Overrun in Messenger Service (828035)

The remote version of Windows contains a Heap Overflow in the Messenger service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Gaobot, Agobot, ... are known to exploit this vulnerability in the wild. C Tenable Network...

AOL Instant Messenger (AIM) Software Detection (credentialed check)

The remote host is running AOL Instant Messenger AIM. AIM is a commonly used chat client. This script was written by Jeff Adams Changes made by Tenable - Updated description - Added Synopsis/Solution/See also - Revise title 10/9/09 - Title touch-up 10/28/09 - Added CPE 08/13/12 include"compat.inc...

Yahoo! Messenger 4.0/5.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/8523/info It has been reported that multiple PC2Phone products are prone to a remote denial of service condition. The problem is said to occur when processing excessive data passed to the programs via a UDP packet and could result in the product crashing...

Yahoo! Messenger 4.05.0 - Remote Denial of Service

Yahoo! Messenger 4.05.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/8523/info It has been reported that multiple PC2Phone products are prone to a remote denial of service condition. The problem is said to occur when processing excessive data passed to the programs via a U...

Buffer overflow in MSN Messenger 6.0

Application: MSN Messenger 6.0 http://www.msnmessenger-download.com/Preview/ Affected Versions: MSN Messenger 6.0 biuld 6.0.0501 and prior Bug: Buffer overflow in msnmsgr.exe In the small viewer box that show the sending file before accepting it. Author: Bahaa Naamneh e-mail: [email protected]...

MSN Messenger DoS

DoS on downloading incomplete image...

Yahoo-ducky.txt

-Dtors Security Research- - www.dtors.net - -Package: Yahoo Messenger -Versions Affected: 5.5 -Website: http://messenger.yahoo.com -Exploit: http://www.dtors.net/exploits/ducky.c -Date: 07/05/03 -Author: [email protected] ---BACKGROUND Yahoo messenger is a world wide scale Instant Messaging client...

Yahoo Messenger 5.5 - 'DSR-ducky.c' Remote Overflow

/ --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define MAXDATASIZE 555 / Max number of bytes of data /...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow

Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define...

Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)

Exploit for unknown platform in category remote exploits ================================================ Yahoo Messenger 5.5 Remote Exploit DSR-ducky.c ================================================ / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code...

CVE-2003-0288

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2003-0288

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2003-0288

IP Messenger for Win suffers a filename-length buffer overflow in the file/folder transfer mechanism (versions 2.00–2.02). The overflow occurs when saving an attached file with a long name, potentially allowing arbitrary code execution with the user’s privileges. The JVN entry confirms impact as ...

CVE-2003-0288: Undefined Security Weakness

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file...

CVE-2002-0785

AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...

CVE-2002-0032

Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI...

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX...

CVE-2002-0785

AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...

CVE-2002-0032

Yahoo! Messenger 5.0.0.1064 and earlier is vulnerable to remote arbitrary-script execution via the addview parameter of the ymsgr URI. The issue stems from Yahoo! Messenger URI handling, allowing an attacker to run code with the victim’s privileges. The advisory/references indicate remediation by...