635 matches found
CVE-2000-1000: Undefined Security Weakness
Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...
CVE-2000-1094: Buffer Copy without Checking Size of Input
Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...
CVE-2001-1416
Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...
CVE-2000-1093
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...
CVE-2000-1094
Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...
CVE-2000-1093
AOL Instant Messenger contains buffer overflow vulnerabilities in the AIM URI handler and command-line/URI parsing that can be triggered by a long goim/aim request, allowing remote execution of arbitrary commands on affected clients. The issue affects AIM before 4.3.2229; exploitation can crash t...
CVE-2000-1093
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...
CVE-2000-1093: Undefined Security Weakness
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...
Administrivia & AOL IM Advisory
At least another author of security bulletins decided to go a similar route as Microsoft did with their email security notices. Last week @Stake, the company that acquired the L0pht, posted to the list a security notice that consisted of a title, affected products, a link to their web advisory an...
AOL Instant Messenger 4.04.1.20104.2.1193 - BuddyIcon Buffer Overflow
AOL Instant Messenger 4.04.1.20104.2.1193 - BuddyIcon Buffer Overflow source: https://www.securityfocus.com/bid/2122/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the...
AOL Instant Messenger 3.5.18564.04.1.20104.2.1193 - aim: Remote Buffer Overflow
AOL Instant Messenger 3.5.18564.04.1.20104.2.1193 - aim: Remote Buffer Overflow source: https://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system s...
AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim:// urls to the AIM client. There exist...
AOL Instant Messenger 4.0/4.1.2010/4.2.1193 - BuddyIcon Buffer Overflow
source: https://www.securityfocus.com/bid/2122/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim:// urls to the AIM client. There exist...
CVE-2000-1000
Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...
aim.caching.txt
% Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Author: f3d Program: AOL Instant Messanger Servers/Clients Fault: Caching vulnerability Os: Win/BSD/Aim compatible % Advisory % Advisory % Advisory % Advisory % Advisory % Advisory % Problem. There is a vulnerability in AOL Insta...
AOL Instant Messenger DoS
AOL Instant Messenger version 4.1.2010 others? appears to be vulnerable to a DoS attack when handling file transfers with filenames containing s. The problem I encountered is that trying to send a file to crash my victim's client would cause my client to crash first, defeating the purpose. To get...
fbi-aim-dos.txt
FROM THE OFFICES OF: | | | \ | | | | | | | | | |/ / | | | | | | | | / \ / | / | '| | || ' | / \ | | |/ |/ \ ' \ / / \ | || | | |/ / | | | | || | | | || / | | | | | / | | | | / | / // ,|| /| ||\||||, ||| ||\| / | |/ AOL Instant Messenger DoS Denial of Service exploit. Website:...
CVE-2000-0383
CVE-2000-0383 concerns AOL Instant Messenger’s file transfer component disclosing the sender’s local file path to the recipient. The CERT/CC entry notes this as an exposure that could enable privacy/security inferences about the sender’s machine. The description in CVE records this behavior; vend...