573 matches found
AOL Instant Messenger buffer overflow in screename
Overview A buffer overflow exists in the AOL Instant Messenger AIM client versions 3.5.x and prior when accepting the screenname from the command line, or through the aim protocol. Description AIM installs a protocol on the machine that enables people to post links on their websites, or send them...
ICQ contains a buffer overflow while processing Voice Video & Games feature requests
Overview There is a remotely exploitable buffer overflow in ICQ. Attackers that are able to exploit the vulnerability may be able to execute arbitrary code with the privileges of the victim user. Description ICQ is a program for communicating with other users over the Internet. ICQ is widely used...
AOL Instant Messenger vulnerable to DoS via crafted WAV file
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM allows users to send audio files to one another. By sending a corrupt WAV formatted file, an attacker can cause the...
AOL Instant Messenger vulnerable to buffer overflow via long filename
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM permits users to send files from one peer to another. By sending a file with a long name, it is possible to crash th...
AOL Instant Messenger vulnerable to buffer overflow via numerous fonts sent to client followed by < HR>
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window and in some cases the operating systemOS. Description AIM for Windows stores font names in the messages sent from one client to another. B...
ISS Security Alert: AOL Instant Messenger Remote Buffer Overflow
Internet Security Systems Security Alert January 2, 2002 AOL Instant Messenger Remote Buffer Overflow Synopsis: Internet Security Systems ISS X-Force has learned of a remote buffer overflow vulnerability in the popular AOL Instant Messenger AIM software. An exploit for this vulnerability has been...
w00w00 on AOL Instant Messenger (serious vulnerability)
================================= AOL Instant Messenger advisory w00w00! http://www.w00w00.org ================================= Author: Matt Conover [email protected] Contributors: nocarrier, napster, and w00w00 collectively PRELUDE Happy w00year! It has been a while, friends, but w00w00 is sti...
AOL Instant Messenger client for Windows contains a buffer overflow while parsing TLV 0x2711 packets
Overview There is a remotely exploitable buffer overflow in AOL Instant Messenger AIM. An exploit has been publicly released. AOL has implemented a server side fix that has largely eliminated the chances of widespread automated exploitation of the vulnerability, but targeted exploitation of...
AOL Instant Messenger 4.x - Remote Buffer Overflow
AOL Instant Messenger 4.x - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game...
AOL Instant Messenger 4.x - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game request is prone to a buffer overflow which could all...
CVE-2001-1421
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1418
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1417
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
DoS против AOL Instant Messanger
Большое количествео открытых HTML-комментариев !-- в теле сообщения приводят к выходу за границы массива...
[ADVISORY] AOL Instant Messenger DoS
Note: I wasn't going to release this until the 8th in order to give AOL some time to release a fix/workaround, but since exploit scripts have already been posted to bugtraq... Scope: Anyone who can send instant messages to a user signed on to the AOL Instant Messenger service can crash that user'...
CVE-2001-1419
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...
Переполнение буфера в AOL Server (buffer overflow)
Переполнение буфера при авторизации...
CVE-2001-0314
CVE-2001-0314 : A buffer overflow in the AOL 5.0 “www.tol” module can be triggered by a long URL in a link, potentially allowing remote denial of service and possibly arbitrary command execution. The provided documents do not include specific exploit details or remediation/version information. No...
Modifed images can lead to JavaScript/VBScript execution in AIM
Software Effected: AOL Instant Messenger Versions Effected: 4.1 to current including 4.4 alpha, older versions probably effected Details: AOL Instnat Messenger has the ability to embed images into an instant message. The user sends the graphic to the person they wish to show, and the graphic show...