2370 matches found
CVE-2001-1417
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
CVE-2001-1418
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1421
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
DoS против AOL Instant Messanger
Большое количествео открытых HTML-комментариев !-- в теле сообщения приводят к выходу за границы массива...
[ADVISORY] AOL Instant Messenger DoS
Note: I wasn't going to release this until the 8th in order to give AOL some time to release a fix/workaround, but since exploit scripts have already been posted to bugtraq... Scope: Anyone who can send instant messages to a user signed on to the AOL Instant Messenger service can crash that user'...
CVE-2001-1419
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...
KICQ 1.0 - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/2443/info KICQ is an ICQ-compatible interactive messaging client for Unix. Versions of KICQ are vulnerable to remote execution of arbitrary commands embedded in URLs. A maliciously-composed URL containing shell metacharacters and shell commands can be sen...
Modifed images can lead to JavaScript/VBScript execution in AIM
Software Effected: AOL Instant Messenger Versions Effected: 4.1 to current including 4.4 alpha, older versions probably effected Details: AOL Instnat Messenger has the ability to embed images into an instant message. The user sends the graphic to the person they wish to show, and the graphic show...
Дырка в AOL Instant Messenger
При некоторых условиях на компьютере клиента может быть выполнен Javascript/VBScript...
CVE-2000-1094
Affected software: AOL Instant Messenger (AIM) prior to version 4.3.2229. Vulnerability: A buffer overflow in the handling of the buddyicon command with a long src argument can allow a remote attacker to execute arbitrary commands on the victim’s machine. Root cause: Buffer overflow when processi...
CVE-2000-1000
Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...
CVE-2000-1094
Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...
CVE-2000-1000
Summary: CVE-2000-1000 is a format-string vulnerability in AOL Instant Messenger (AIM) 4.1 and earlier. The issue arises when transferring a file whose name contains format specifiers, which can cause a denial of service and may allow arbitrary command execution. Root cause: format-string handlin...
CVE-2000-1000: Undefined Security Weakness
Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...
CVE-2000-1094: Buffer Copy without Checking Size of Input
Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...
CVE-2001-1416
Multiple cross-site scripting XSS vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger AIM 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the 1 DATA, 2 STYLE, or 3 BINARY tags...
CVE-2000-1094
Buffer overflow in AOL Instant Messenger AIM before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument...
CVE-2000-1093
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...
PT-2001-1134 · Aol · Aol Instant Messenger
Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM versions prior to 4.3.2229 Description: The issue allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long src argument. This is achieved by exploiting a buffer overflow in the...