Microsoft Windows Live Messenger联系人列表处理远程拒绝服务漏洞

BUGTRAQ ID: 18639 Windows Live Messenger是微软即将推出的Windows Live产品系列的一个重要组成部分，它将是新一代的MSN Messenger。 Live Messenger在处理畸形的联系人列表（.ctt）文件时存在堆溢出漏洞，如果用户受骗导入了恶意的.ctt文件的话，就会触发这个漏洞，导致拒绝服务。 Microsoft Windows Live Messenger 8.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

AOL Instant messenger code execution

Microsoft Internet Explorer control is used for HTML content rendering without limiting zone access...

America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution

Sorry for the brief post but Im still able to bypass filters that aol has put in place. So again with frustration I come to FD to imply pressure on a company to patch correct. From reading feedback from AOL they feel the vulnerability is put to bed and requires no more attention. I am not posting...

CVE-2007-6511

Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a 1 RealPlayer G2, 2 MSMSGS, or 3 StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization...

DSA-1433-1 centericq - buffer overflow

Bulletin has no description...

Gadu-Gadu instant messenger buffer overflow

Buffer overflows on emotion icons parsing...

CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

CVE-2002-2361

The vulnerability CVE-2002-2361 affects Yahoo! Messenger installers (versions 4.0, 5.0, 5.5). The root cause is that the installer does not verify package signatures, allowing a remote attacker to substitute a trojan-laden package via DNS spoofing. Practical impact is installation of unauthentica...

CVE-2003-1503

Affected software: AOL Instant Messenger (AIM) 5.2.3292. Vulnerability: Buffer overflow in handling an aim:getfile URL with a long screen name. Impact: Allows remote attackers to execute arbitrary code. Root cause: Buffer overflow in AIM’s URL handling/ascii processing (per available reports). Re...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...

Miranda instant messenger multiple security vulnerabilities

Yahoo! messenger plugin multiple buffer overflows...

On Yahoo! Messenger 0day exploit ideas-vulnerability warning-the black bar safety net

This vulnerability exposure also have a couple of weeks, the official date has not out patch. Test procedure: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Vulnerability description Yahoo Messenger is a very popular instant messaging tool. Yahoo Messenger of the CYFT ActiveX control is...

Yahoo! Messenger ActiveX Control YVerInfo.dll Buffer Overflow (CVE-2007-4515)

Yahoo! Messenger is a popular advertisement-supported instant messaging client. A buffer overflow vulnerability exists in Yahoo! Messenger. The vulnerability is due to a boundary error within the Yahoo! Messenger YVerInfo.dll ActiveX control when handling certain methods. To trigger this issue, a...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll 'Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll MSFLICENSE,...

CVE-2007-5144

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

Buffer overflow

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

CVE-2007-5144

CVE-2007-5144: A buffer overflow in the GDI engine of Windows Live Messenger (MSN Live 8.1) could be triggered by placing a malformed file in a new folder under the Sharing Folders path and triggering a synchronize operation. The issue allows user-assisted remote attackers to cause a denial of se...

CVE-2007-5144

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service application crash or system crash and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing...

CVE-2007-5124

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...

CVE-2007-5124

CVE-2007-5124 concerns AOL AIM 6.5.3.12 and earlier, where an embedded Internet Explorer server control in the AIM client renders HTML content from IM messages without proper sanitization, enabling remote code execution. The root cause relates to inadequate handling of mshtml-based HTML/JS in mes...