2402 matches found
CVE-2005-0562
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...
CVE-2005-0562
The CVE-2005-0562 issue affects MSN Messenger 6.2 and involves a GIF processing buffer overflow. A malformed GIF with improper height/width could allow a remote attacker in a victim’s contact list to execute arbitrary code with the user’s privileges. Microsoft’s MS05-022/MS05-009 postings documen...
Microsoft Security Bulletin MS05-022 Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)
Microsoft Security Bulletin MS05-022 Vulnerability in MSN Messenger Could Lead to Remote Code Execution 896597 Issued: April 12, 2005 Version: 1.0 Summary Who should read this document: Customers who use MSN Messenger Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critica...
MSN Messenger GIF file buffer overflow
Buffer overflow on GIF files parsing...
CVE-2005-0562
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...
Microsoft MSN Messenger GIF Image Processing Remote Buffer Overflow Vulnerability
Description Microsoft MSN Messenger is prone to a remote buffer-overflow vulnerability when handling malformed Graphic Interchange Format GIF images. This may allow an attacker to gain unauthorized access to an affected computer by executing arbitrary code, reportedly resulting in system-level...
MS05-022: Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)
The remote host is running MSN Messenger. The version of MSN Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles GIF files with height and width fields. An attacker may exploit this vulnerability to execute arbitrary code on the remote host. C Tenable...
Microsoft MSN Messenger GIF processing buffer overflow
Overview MSN Messenger clients before version 7.0 will allow remote attackers to take control of a computer if malicious GIF files are processed. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with people using text messages, voice and vid...
MSN Messenger Malformed GIF Remote Overflow (deprecated)
Binary data 2817.prm...
[Full-disclosure] PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow
Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...
Gaim < 1.2.1 Multiple Vulnerabilities
Binary data 2793.prm...
Multiple Trillian instant messenger buffer overflows
Multiple buffer overflow on parsing HTTP-based protocols, including RSS...
CVE-2001-1418
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1416
The CVE-2001-1416 entry concerns multiple cross-site scripting (XSS) vulnerabilities in the log messages of certain Alpha versions of AOL Instant Messenger (AIM) 4.4. The vulnerability allows remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) ...
CVE-2001-1421
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1417
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
CVE-2001-1418
CVE-2001-1418 affects AOL Instant Messenger (AIM) 4.7, where remote attackers can trigger a denial of service by sending a malformed WAV file. The vulnerability is described with a MEDIUM base score (5.0) and a network attack vector with no authentication required; exploitation details are not pr...
CVE-2001-1419
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...
CVE-2001-1420
CVE-2001-1420 affects AOL Instant Messenger (AIM) 4.7. The vulnerability is a denial of service caused by processing a long filename, likely due to a buffer overflow in the file/name handling path, which can crash the application when a crafted filename is encountered. The exposed impact is a loc...