2402 matches found
AOL Instant Messenger vulnerable to buffer overflow via numerous fonts sent to client followed by < HR>
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window and in some cases the operating systemOS. Description AIM for Windows stores font names in the messages sent from one client to another. B...
ISS Security Alert: AOL Instant Messenger Remote Buffer Overflow
Internet Security Systems Security Alert January 2, 2002 AOL Instant Messenger Remote Buffer Overflow Synopsis: Internet Security Systems ISS X-Force has learned of a remote buffer overflow vulnerability in the popular AOL Instant Messenger AIM software. An exploit for this vulnerability has been...
w00w00 on AOL Instant Messenger (serious vulnerability)
================================= AOL Instant Messenger advisory w00w00! http://www.w00w00.org ================================= Author: Matt Conover [email protected] Contributors: nocarrier, napster, and w00w00 collectively PRELUDE Happy w00year! It has been a while, friends, but w00w00 is sti...
AOL Instant Messenger client for Windows contains a buffer overflow while parsing TLV 0x2711 packets
Overview There is a remotely exploitable buffer overflow in AOL Instant Messenger AIM. An exploit has been publicly released. AOL has implemented a server side fix that has largely eliminated the chances of widespread automated exploitation of the vulnerability, but targeted exploitation of...
AOL Instant Messenger 4.x - Remote Buffer Overflow
AOL Instant Messenger 4.x - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game...
AOL Instant Messenger 4.x - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game request is prone to a buffer overflow which could all...
Уязвимости в авторизации Yahoo Messanger (weak encryption)
Пароль передается в формате cryp без механизма challenge-response что делает возможным replay-атаки и атаки на перебор...
Insecure Password Authentication in Yahoo! Messenger
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! YAHOO MESSENGER REPLAY ATTACK! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ "Overt...
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...
CVE-2001-0788
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...
CVE-2001-1421
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1418
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1417
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
DoS против AOL Instant Messanger
Большое количествео открытых HTML-комментариев !-- в теле сообщения приводят к выходу за границы массива...
[ADVISORY] AOL Instant Messenger DoS
Note: I wasn't going to release this until the 8th in order to give AOL some time to release a fix/workaround, but since exploit scripts have already been posted to bugtraq... Scope: Anyone who can send instant messages to a user signed on to the AOL Instant Messenger service can crash that user'...
CVE-2001-1419
AOL Instant Messenger AIM 4.7.2480 and earlier allows remote attackers to cause a denial of service application crash via an instant message that contains a large amount of "!--" HTML comments...
m-i-t-m - атака против Messenger/Hotmail
No description provided...
Messenger/hotmail MITM exploit
hello, this a little sploit i wrote for Linux to test a man in the middle attack against Messenger/Hotmail. A kind of swiss army knife that: / use the messenger scrambler bug to get passwords hashes / spoof hotmail site to retrieve plaintext passwords since protocol is not enciphered when users...
Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure
Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/2881/info Air Messenger LAN Server for Microsoft Windows allows users to exchange phone, pager and email messages through a Web gateway. The path to sensitive files used by...