678 matches found
CVE-2001-1421: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1417: Undefined Security Weakness
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
CVE-2001-1419: Undefined Security Weakness
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "...
CVE-2005-0472
Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...
CVE-2002-1591
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to Internet Explorer’s Trusted Sites Zone without user approval, potentially allowing code from that domain to bypass access restrictions. The connected documents provide AIM as the affected product and indicate the root cause is improper Tru...
CVE-2002-1591
AOL Instant Messenger AIM 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions...
CVE-2004-1716
CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...
CVE-2004-1716: Undefined Security Weakness
Cross-site scripting XSS vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the 1 IRC Server or 2 AIM ID fields in the user profile...
CVE-2005-0472
Gaim (GAIM) before 1.1.3 is CERTified vulnerable to remote DoS via specially malformed SNAC packets from AIM/ICQ. The issue stems from SNAC packet processing that can trigger an infinite loop, causing the client to become unresponsive. Public reports reference CVE-2005-0472 (and related CAN/CVE m...
CVE-2005-0472
Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...
CVE-2005-0472: Undefined Security Weakness
Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...
gaim -- AIM/ICQ remote denial of service vulnerability
The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to freeze: Certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim when parsing the SNAC. The remote user would need a custom client, able to generate...
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
CVE-2004-0636
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger AIM 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message...
AOL Instant Messenger AIM "Away" Message Remote Exploit
Exploit for unknown platform in category remote exploits ======================================================= AOL Instant Messenger AIM "Away" Message Remote Exploit ======================================================= / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by...
GLSA-200406-01 : Ethereal: Multiple security problems
The remote host is affected by the vulnerability described in GLSA-200406-01 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make...
AOL Instant Messenger URL refresh Tag XSS
Binary data 1247.prm...
CVE-2004-0505
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...
CVE-2004-0636
CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...
