aol instant messenger 4.7.2480 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote malicious users to execute arbitrary code via a long argument in a game request (AddGame).

Aol Instant Messenger 4.5 Aol Instant Messenger 4.6 Aol Instant Messenger 4.3.2229 Aol Instant Messenger 4.4 Aol Instant Messenger 4.7 Aol Instant Messenger 4.7.2480 Aol Instant Messenger 4.3 Aol Instant Messenger 4.8.2616

1 EDB exploit

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 up to and including 5.5 is created in a predictable location, which may allow remote malicious users to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

Aol Instant Messenger 4.8.2616 Aol Instant Messenger 4.8.2646 Aol Instant Messenger 4.7 Aol Instant Messenger 4.7.2480 Aol Instant Messenger 5.5 Aol Instant Messenger 5.5.3415 Beta Aol Instant Messenger 4.4 Aol Instant Messenger 4.5 Aol Instant Messenger 4.6 Aol Instant Messenger 5.1.3036 Aol Instant Messenger 5.2.3292 Aol Instant Messenger 4.3 Aol Instant Messenger 4.3.2229 Aol Instant Messenger 4.8.2790 Aol Instant Messenger 5.0.2938

1 EDB exploit

AOL Instant Messenger (AIM) allows remote malicious users to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.

Aol Instant Messenger 4.7.2480

AOL Instant Messenger 5.5.x and previous versions allows remote malicious users to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

1 EDB exploit

Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote malicious users to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" t...

Aol Instant Messenger 4.7 Aol Instant Messenger 4.5 Aol Instant Messenger 4.7.2480

1 EDB exploit

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 up to and including 4.8.2616 allows remote malicious users to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get...

Aol Instant Messenger 4.8.2646 Aol Instant Messenger 4.4 Aol Instant Messenger 4.5 Aol Instant Messenger 4.6 Aol Instant Messenger 4.7.2480 Aol Instant Messenger 4.7 Aol Instant Messenger 4.8.2616

AOL Instant Messenger (AIM) allows remote malicious users to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.

Aol Instant Messenger 4.1 Aol Instant Messenger 4.1.2010 Aol Instant Messenger 4.2 Aol Instant Messenger 4.2.1193 Aol Instant Messenger 4.0 Aol Instant Messenger 4.3 Aol Instant Messenger 4.4 Aol Instant Messenger 4.6 Aol Instant Messenger 4.7 Aol Instant Messenger 4.7.2480 Aol Instant Messenger 4.8.2616 Aol Instant Messenger 4.3.2229 Aol Instant Messenger 4.5 Aol Instant Messenger 4.8.2646

AOL Instant Messenger (AIM) 4.7.2480 and previous versions allows remote malicious users to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.

Aol Instant Messenger 4.0 Aol Instant Messenger 4.6 Aol Instant Messenger 4.7 Aol Instant Messenger 4.3 Aol Instant Messenger 4.3.2229 Aol Instant Messenger 4.1 Aol Instant Messenger 4.2 Aol Instant Messenger 4.7.2480 Cerulean Studios Trillian 0.6351 Aol Instant Messenger 4.4 Aol Instant Messenger 4.5

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote malicious users to execute arbitrary programs by specifying the program in the href attribute of a link.

Aol Instant Messenger 4.8.2616 Aol Instant Messenger 4.8.2646 Aol Instant Messenger 5.0.2938 Aol Instant Messenger 4.7.2480

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook