2406 matches found
AOL Instant Messenger vulnerable to DoS via crafted packets
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window. Description All versions of AIM for Windows proir to beta version 4.8.2540 contain a buffer overflow that permits an attacker to cause a...
AOL Instant Messenger buffer overflow in screename
Overview A buffer overflow exists in the AOL Instant Messenger AIM client versions 3.5.x and prior when accepting the screenname from the command line, or through the aim protocol. Description AIM installs a protocol on the machine that enables people to post links on their websites, or send them...
AOL Instant Messenger vulnerable to DoS via crafted WAV file
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM allows users to send audio files to one another. By sending a corrupt WAV formatted file, an attacker can cause the...
AOL Instant Messenger vulnerable to buffer overflow via numerous fonts sent to client followed by < HR>
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client window and in some cases the operating systemOS. Description AIM for Windows stores font names in the messages sent from one client to another. B...
AOL Instant Messenger vulnerable to buffer overflow via long filename
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A vulnerability exists that can crash the client of a victim. Description AIM permits users to send files from one peer to another. By sending a file with a long name, it is possible to crash th...
ISS Security Alert: AOL Instant Messenger Remote Buffer Overflow
Internet Security Systems Security Alert January 2, 2002 AOL Instant Messenger Remote Buffer Overflow Synopsis: Internet Security Systems ISS X-Force has learned of a remote buffer overflow vulnerability in the popular AOL Instant Messenger AIM software. An exploit for this vulnerability has been...
w00w00 on AOL Instant Messenger (serious vulnerability)
================================= AOL Instant Messenger advisory w00w00! http://www.w00w00.org ================================= Author: Matt Conover [email protected] Contributors: nocarrier, napster, and w00w00 collectively PRELUDE Happy w00year! It has been a while, friends, but w00w00 is sti...
AOL Instant Messenger client for Windows contains a buffer overflow while parsing TLV 0x2711 packets
Overview There is a remotely exploitable buffer overflow in AOL Instant Messenger AIM. An exploit has been publicly released. AOL has implemented a server side fix that has largely eliminated the chances of widespread automated exploitation of the vulnerability, but targeted exploitation of...
AOL Instant Messenger 4.x - Remote Buffer Overflow
AOL Instant Messenger 4.x - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game...
AOL Instant Messenger 4.x - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game request is prone to a buffer overflow which could all...
Уязвимости в авторизации Yahoo Messanger (weak encryption)
Пароль передается в формате cryp без механизма challenge-response что делает возможным replay-атаки и атаки на перебор...
Insecure Password Authentication in Yahoo! Messenger
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! YAHOO MESSENGER REPLAY ATTACK! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ "Overt...
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...
CVE-2001-0788
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...
CVE-2001-1421
AOL Instant Messenger AIM 4.7 and earlier allows remote attackers to cause a denial of service application crash via a large number of different fonts followed by an HTML HR tag...
CVE-2001-1418
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application crash via a malformed WAV file...
CVE-2001-1417
AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...
DoS против AOL Instant Messanger
Большое количествео открытых HTML-комментариев !-- в теле сообщения приводят к выходу за границы массива...
[ADVISORY] AOL Instant Messenger DoS
Note: I wasn't going to release this until the 8th in order to give AOL some time to release a fix/workaround, but since exploit scripts have already been posted to bugtraq... Scope: Anyone who can send instant messages to a user signed on to the AOL Instant Messenger service can crash that user'...