535 matches found
AOL Instant Messenger URL refresh Tag XSS
Binary data 1247.prm...
CVE-2004-0505
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
CVE-2004-0636
CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...
AOL Instant Messenger buffer overflow
Buffer overflow in aim:goaway URI handler...
Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
security flaw
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
CVE-2004-0505
CVE-2004-0505 affects Ethereal (Wireshark) with the AIM dissector. The advisory notes that Ethereal versions prior to the fixed release (e.g., 0.10.x up to 0.10.3) are vulnerable and can trigger an assertion error leading to a denial of service. The OpenVAS/Gentoo/GNU advisories corroborate a vul...
PT-2004-1619 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service via unknown attack vectors in the AIM dissector. Recommendations: For Ethereal version 0.10.3, at the moment, there is no information about a...
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
PT-2003-2448 · Aol · Aol Instant Messenger
Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM version 5.2.3292 Description: The issue allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. This is a result of a buffer overflow. Recommendations: For AOL Instant...
CVE-2002-0785
AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...
CVE-2002-1485
The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...
CVE-2002-1485
The CVE-2002-1485 entry concerns the AIM component of Trillian versions 0.73 and 0.74. A remote attacker can cause a denial of service (crash) by sending certain strings (e.g., "P > O
Trillian Remote DoS Attack - AIM
Advisory Url: http://www.computersecuritynow.com/modules.php?op=modload&name=News&file=article&sid=817&mode=thread&order=0&thold=0 ComputerSecurityNow Advisory Sep 23 2002 Trillian Remote DoS Attack - AIM Spikeman - spikeman at computersecuritynow dot com http://www.computersecuritynow.com/ Thank...
CVE-2002-0591
CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...
CVE-2002-0592
CVE-2002-0592 affects AOL Instant Messenger (AIM). The vulnerability allows remote attackers to steal files being transferred to other clients by connecting to AIM’s Direct Connection port 4443 or file transfer port 5190 before the intended user. The available sources describe this as a scheme to...
AOL Instant Messenger vulnerable to denial-of-service attack via buddy list transfers
Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a program for communicating with other users over the Internet and is widely used. During a buddy list transfer, a buffer overflow may occur. It has...
AIM Remote File Transfer/Direct Connection Vulnerability
AIM Remote File Transfer/Direct Connection Vulnerability I Discovered this vulnerability while I was port scanning my brotherApril 15th, 2002, he just happened to send me a file and the port scan connected and received the file instead of me... The next dayApril 16th, 2002 I made a program to...