vendor:
Instant Messenger
by:
SecurityFocus
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Instant Messenger
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005
AOL Instant Messenger Remote Denial of Service Vulnerability
AOL Instant Messenger is reported prone to a remote denial of service vulnerability. The issue manifests when the affected client application handles a chat invitation, a file transfer, or a game request that contains 'smiley' HTML code that passes invalid data as the location of the 'smiley' icon. Reports indicate that the issue manifests because of a buffer overflow condition this, however, is not confirmed. A remote attacker may leverage this condition to crash a target AOL Instant Messenger client. Other attacks may also be possible.
Mitigation:
Ensure that all software is up to date and patched with the latest security updates.
