Zeus Trojan Found in Fake AIM Update

A new iteration of Zeus, a notorious password-stealing trojan, is victimizing users of AOL Instant Messenger AIM, according to researchers. Read the full article. Secure Computing...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:001)

Security vulnerabilities has been identified and fixed in pidgin : The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrate...

AIM Triton 1.0.4 CSeq Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'AIM Triton...

Pidgin DoS

Crash on OSCAR protocol contact list parsing ICQ and AIM...

AOL AIM 'sipXtapi.dll' Multiple Buffer Overflow Vulnerabilities

AOL AIM is affected by multiple buffer overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the software or cause an application crash. C Tenab...

CVE-2009-3790

Heap-based buffer overflow in FormMax formerly AcroForm evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import .aim file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3790

Heap-based buffer overflow in FormMax formerly AcroForm evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import .aim file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3790

CVE-2009-3790 describes a heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5, enabling remote attackers to cause a denial of service or potentially execute arbitrary code via a crafted FormMax import (.aim) file. The vulnerability details are supported by multiple sources (N...

CVE-2009-3790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in FormMax formerly AcroForm evaluation 3.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FormMax import .aim file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

[SECURITY] Fedora 11 Update: pidgin-2.6.3-2.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Design/Logic Flaw

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

CVE-2009-3615

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

DEBIAN-CVE-2009-3615

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

Gaim AIM-ICQ Protocol Handling Buffer Overflow (CVE-2005-2103)

Gaim is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN, Yahoo!, and IRC. Gaim allows one user to log into multiple accounts on multiple IM networks simultaneously. The AIM/ICQ protocol is a TCP based instant message...

Cerulean Studios Trillian AIM XML Tag Handling Heap Buffer Overflow (CVE-2008-5403)

Cerulean Studios' Trillian is an instant messaging IM client application that can interact with various IM protocols such as MSN, AIM, ICQ, YAHOO, etc. Specifically, AIM clients uses Open System for Communication in Realtime OSCAR protocol to talk to the backend servers. In Trillian, communicatio...

Apple Mac OS X iChat AIM URL Format String (CVE-2007-0021)

Apple Computer Mac OS X is the operating system shipped with Apple Macintosh computers. The product bundles numerous Internet applications such as web browser, email client, instant messenger, etc. Apple iChat is a multi-protocol instant messaging application that supports AIM and Jabber services...

Design/Logic Flaw

Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cau...

CVE-2009-2975: Undefined Security Weakness

Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cau...

[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Multiple Products NSS Library Buffer Overflow Vulnerability

Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...