573 matches found
CVE-2007-1921
LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption...
iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability
AOL AIM and ICQ File Transfer Path-Traversal Vulnerability iDefense Security Advisory 04.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2007 I. BACKGROUND AOL Instant Messenger and ICQ are instant messaging applications that allow users to exchange messages and files. More...
AOL instant messenger / ICQ directory traversal
Directory traversal on file receiption...
AOL SuperBuddy ActiveX Control Remote Code Execution Exploit (meta)
No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. ,...
[Full-disclosure] AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)
AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption Off By Zero by Piotr Bania [email protected] http://www.piotrbania.com Severity: Critical - Possible remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. There exist a...
[Full-disclosure] AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption
AOL Nullsoft Winamp IT Module "INMOD.DLL" Remote Heap Memory Corruption by Piotr Bania [email protected] http://www.piotrbania.com Severity: Important - Potencial remote code execution. Software affected: Tested on AOL Nullsoft Winamp v5.33 x86 Feb 13 2007 on Windows XP SP1/SP2. Orginal url:...
aol-activex.txt
require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. , 'License' = MSFLICENSE, 'Author' = 'kradchad...
AOL SuperBuddy ActiveX fails to properly validate method arguments
Overview The AOL SuperBuddy ActiveX control does not properly validate arguments to the LinkSBIcons method. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The AOL SuperBuddy ActiveX control Sb.SuperBuddy.1 is a compone...
AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)
AOL SuperBuddy - ActiveX Control Remote Code Execution Metasploit require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing...
AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)
require 'msf/core' module Msf class Exploits::Windows::Browser::AOLSuperBuddyLinkSBIcons 'AOL Sb.Superbuddy vulnerability', 'Description' = %q This module exploits a flaw in AOL Sb.SuperBuddy. We stole this code from a pre-existing metasploit module. , 'License' = MSFLICENSE, 'Author' = 'kradchad...
AOL SuperBuddy ActiveX Control Remote Code Execution Exploit (meta)
Exploit for unknown platform in category remote exploits =================================================================== AOL SuperBuddy ActiveX Control Remote Code Execution Exploit meta =================================================================== require 'msf/core' module Msf class...
CVE-2007-1767
Unspecified vulnerability in 1 Deskbar.dll and 2 Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service browser crash via unknown vectors...
AOL software DoS
No description provided...
CVE-2007-1767
CVE-2007-1767 concerns AOL 9.0 (Deskbar.dll and Toolbar.dll) with an unspecified vulnerability that allows remote attackers to trigger a denial of service (browser crash) via unknown vectors. Affected software is AOL 9.0 prior to February 2007; the specific root cause, affected components, and po...
CVE-2007-1767
Unspecified vulnerability in 1 Deskbar.dll and 2 Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service browser crash via unknown vectors...
AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Overview AOL has recently been made aware of a denial of service condition that exists in early versions of the AOL 9.0 client software. The affected DLLs are listed below: Deskbar.dll Toolbar.dll AOL does not believe that the issue presents a threat ...
MOAB-20-01-2007: Apple iChat aim:// URL Handler Format String Vulnerability
Summary Description from the Wikipedia article: AOL Instant Messenger AIM, ICQ, .Mac and Jabber client for Mac OS X. Using a Jabber-like protocol and Bonjour for user discovery, it also allows for LAN communication. iChat's AIM support is fully endorsed by AOL, and uses their official...
MA-23-06-2006.txt
Vendor: AOL. Severity: Critical. Dated: 23 December 2006. Explanation: ------------ SQL injection vulnerability has been noticed in number of AOL websites. When a malformed input is injected in the URL parameter the relative information regarding database , tables and various queries are displaye...
AOL ICQ ActiveX DownloadAgent vulnerability
Added: 12/15/2006 CVE: CVE-2006-5650 BID: 20930 OSVDB: 30220 Background America Online AOL ICQ is a widely used program for communicating with other users on the Internet. Problem The ICQPhone.SipxPhoneManager ActiveX control, which is installed with ICQ, includes a function called DownloadAgent...
AOL ICQ ActiveX DownloadAgent vulnerability
Added: 12/15/2006 CVE: CVE-2006-5650 BID: 20930 OSVDB: 30220 Background America Online AOL ICQ is a widely used program for communicating with other users on the Internet. Problem The ICQPhone.SipxPhoneManager ActiveX control, which is installed with ICQ, includes a function called DownloadAgent...