573 matches found
CVE-2002-0785
AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...
CVE-2002-2169
Cross-site scripting vulnerability AOL Instant Messenger AIM 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL...
CVE-2002-1953
Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...
CVE-2002-1813
Directory traversal vulnerability in AOL Instant Messenger AIM 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link...
CVE-2002-1743
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service crash via a malformed .hpf file...
AIM 4.8.2790 remote file execution vulnerability
Description: AOL Instant Messenger version 4.8.2790 will execute programs when a user clicks on a not-so-specially crafted hypertext link. Versions affected: AOL Instant Messenger 4.8.2790. 4.7.2480 is not vulnerable and neither is 5.0.2938. This bug was confirmed on both Windows 2000 and Windows...
AOL Instant Messenger 4.8.2790 - Local File Execution
source: https://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files to a user of the client. When the link is visited, the...
AOL Instant Messenger 4.8.2790 - Local File Execution
AOL Instant Messenger 4.8.2790 - Local File Execution source: https://www.securityfocus.com/bid/6027/info AOL Instant Messenger AIM is prone to an issue which may allow attackers to execute arbitrary files on the client system. It is possible to send a malicious link which references local files ...
CVE-2002-0785
AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...
AOL Instant Messenger 4.x - Unauthorized Actions
source: https://www.securityfocus.com/bid/5246/info The AOL Instant Messenger client is prone to an issue which may allow maliciously crafted HTML to perform unauthorized actions such as adding entries to the buddy list on behalf of the user of a vulnerable client. This condition is due to how th...
AOL Instant Messenger 4.x - Unauthorized Actions
AOL Instant Messenger 4.x - Unauthorized Actions source: https://www.securityfocus.com/bid/5246/info The AOL Instant Messenger client is prone to an issue which may allow maliciously crafted HTML to perform unauthorized actions such as adding entries to the buddy list on behalf of the user of a...
CVE-2002-0591
Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...
CVE-2002-0592
AOL Instant Messenger AIM allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 Direct Connection or port 5190 file transfer before the intended user...
CVE-2002-0591
CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...
CVE-2002-0592
AOL Instant Messenger AIM allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 Direct Connection or port 5190 file transfer before the intended user...
AOL Instant Messenger vulnerable to denial-of-service attack via buddy list transfers
Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a program for communicating with other users over the Internet and is widely used. During a buddy list transfer, a buffer overflow may occur. It has...
AOL Instant Messenger vulnerable to buffer overflow via crafted "addbuddy" URI sent in message
Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a widely used program for communicating with other users over the Internet. A buffer overflow exists in the processing of the addbuddy parameter of t...
CVE-2002-0362
Buffer overflow in AOL Instant Messenger AIM 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711...
Hole in AOL Instant Messenger
Hello all, This morning I noticed something while playing around with the aim:AddBuddy hyperlink for AIM. If you add many characters separated by commas you can crash the aim when a user clicks it. An example: aim:AddBuddy? ScreenName=InterWN,InterWN,InterWN,InterWN,InterWN,InterWN,I...