Lucene search
+L

2407 matches found

CVE
CVE
added 2007/07/21 12:00 a.m.58 views

CVE-2007-3928

Yahoo! Messenger 8.1 is affected by CVE-2007-3928 due to a buffer overflow in address-book entries. An authenticated user can exploit a long e-mail address in an address book to execute arbitrary code on the victim’s system. The issue is described as a remote code execution vector with user inter...

7.6CVSS7.4AI score0.05664EPSS
SaveExploits0References7Affected Software1
securityvulns
securityvulns
added 2007/07/18 12:00 a.m.19 views

Yahoo Messenger buffer overflow

Buffer overflow on oversized e-mail address in address buuok entry...

4.9AI score
SaveExploits0References1Affected Software1
Prion
Prion
added 2007/07/17 10:30 p.m.20 views

Buffer overflow

Buffer overflow in the AOL Instant Messenger AIM protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///1111111/ substring...

9.3CVSS8.2AI score0.11807EPSS
SaveExploits1References7Affected Software1
CVE
CVE
added 2007/07/17 10:00 p.m.54 views

CVE-2007-3832

The CVE-2007-3832 issue affects Trillian before 3.1.7.0, where a buffer overflow in the AIM protocol URI handler (aim.dll) can be triggered by specially crafted aim:// URIs. An unauthenticated remote attacker could potentially execute arbitrary code with the user’s privileges by convincing a user...

9.3CVSS7.9AI score0.11807EPSS
SaveExploits1References7Affected Software1
exploitpack
exploitpack
added 2007/07/16 12:00 a.m.12 views

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execu...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/07/16 12:00 a.m.27 views

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow

source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the application or to...

6CVSS5.8AI score0.02439EPSS
SaveExploits1
NVD
NVD
added 2007/07/10 12:30 a.m.26 views

CVE-2007-3638

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization...

6CVSS7.3AI score0.02439EPSS
SaveExploits1References2
Prion
Prion
added 2007/07/10 12:30 a.m.25 views

Buffer overflow

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization...

6CVSS7.7AI score0.02439EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2007/07/10 12:00 a.m.35 views

CVE-2007-3638

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization...

7.3AI score0.02439EPSS
SaveExploits1References2
CVE
CVE
added 2007/07/10 12:00 a.m.54 views

CVE-2007-3638

CVE-2007-3638 is linked to a Yahoo! Messenger 8.1 buffer overflow issue. Related connected records (CVE-2007-3928) describe a buffer overflow allowing remote code execution via a long e-mail address in an address book entry by user-assisted remote authenticated users; this might overlap CVE-2007-...

6CVSS7.3AI score0.02439EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2007/06/27 12:30 a.m.20 views

CVE-2007-3436

Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service resource consumption via a flood of SIP INVITE requests to the port specified for voice conversation...

5CVSS6.6AI score0.12656EPSS
SaveExploits0References3
Prion
Prion
added 2007/06/27 12:30 a.m.17 views

Design/Logic Flaw

Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service resource consumption via a flood of SIP INVITE requests to the port specified for voice conversation...

5CVSS6.9AI score0.12656EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2007/06/27 12:30 a.m.24 views

Code injection

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

7.8CVSS6.8AI score0.01619EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2007/06/27 12:30 a.m.21 views

CVE-2007-3437

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

7.8CVSS6.4AI score0.01602EPSS
SaveExploits0References3
CVE
CVE
added 2007/06/27 12:00 a.m.63 views

CVE-2007-3437

CVE-2007-3437 affects AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP. It is a remote denial of service vulnerability triggered by a malformed SIP INVITE header value, causing the AIM application to crash. The vulnerability is described as distinct from CVE-2007-3350 (a separate SIP INVITE flo...

7.8CVSS6.6AI score0.01602EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/06/27 12:00 a.m.27 views

CVE-2007-3437

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

6.4AI score0.01602EPSS
SaveExploits0References3
CVE
CVE
added 2007/06/27 12:00 a.m.47 views

CVE-2007-3436

The CVE-2007-3436 entry affects Microsoft MSN Messenger 4.7 on Windows XP, where remote attackers can cause a denial of service through a flood of SIP INVITE requests to the voice-conversation port, resulting in resource consumption. The available documents describe the affected product, the vuln...

5CVSS6.7AI score0.12656EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/06/27 12:00 a.m.29 views

CVE-2007-3436

Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service resource consumption via a flood of SIP INVITE requests to the port specified for voice conversation...

6.6AI score0.12656EPSS
SaveExploits0References3
Prion
Prion
added 2007/06/22 6:30 p.m.19 views

Design/Logic Flaw

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...

7.8CVSS6.8AI score0.01619EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2007/06/22 6:00 p.m.29 views

CVE-2007-3350

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...

6.5AI score0.01619EPSS
SaveExploits0References4
Rows per page
Query Builder