How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

Mercora IMRadio Detection

Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. OpenVAS Vulnerability Test $Id: mercoraimradioinstalled.nasl...

Buffer overflow

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

CVE-2006-0629

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

CVE-2006-0629

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

CVE-2006-0629

CVE-2006-0629 affects AOL Instant Messenger (AIM) 5.9.3861. An attacker can trigger a buffer overflow by causing a user to request Buddy Info for a long screen name, potentially crashing the client and possibly enabling arbitrary code execution. No fix/version details are provided in the supplied...

CVE-2006-0629: Undefined Security Weakness

Unspecified vulnerability in AOL Instant Messenger AIM 5.9.3861 allows user-assisted remote attackers to cause a denial of service client crash and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow...

icq-xss.txt

Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...

CVE-2005-3986

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...

CVE-2005-3986

This CVE (CVE-2005-3986) affects Instant Photo Gallery (version 1 and earlier). The vulnerability is SQL injection in two parameters: cat_id in portfolio.php and cid in content.php, allowing remote attackers to execute arbitrary SQL commands. The exploitation is described as remote and results in...

CVE-2005-3986

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...

CVE-2005-3986: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...

Instant Photo Gallery SQL inj. vuln.

Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...

Kadu Gadu-Gadu instant messaging client DoS

Application hangs on malcrafted message...

Kadu remote DoS

Hi. Kadu is a Gadu-Gadu instant messaging open source client. By sending message with richtext ,image basic informations and nothing else to speciffic UIN thru Gadu-Gadu server Kadu is stopping to respond or is shutting down immidietly. Behavior depends on version 0.4.2 In most cases Kadu freezes...

[Full-disclosure] Gadu-Gadu several vulnerabilities (version <= 7.20)

21/11/05 Gadu-Gadu instant messenger several vulnerabilities I. INTRODUCTION During the preparation of the materials about instant messengers security for the security conference we have checked current state of the Gadu-Gadu http://www.gadu-gadu.pl security. There was discovered a several new...

Multiple Gadu-Gadu instant messenger vulnerabilities

Special device access, buffer overflow, DoS, ability to initiate voice transfer from the client without user intervation...

CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...

CVE-2002-2169: Undefined Security Weakness

Cross-site scripting vulnerability AOL Instant Messenger AIM 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL...

AOL Instant Messenger is Installed

The remote host is using AOL Instant Messenger AIM. AIM has been associated with multiple security vulnerabilities in the past. This software is not suitable for a business environment. OpenVAS Vulnerability Test $Id: aolinstalled.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: AOL Instant...