AOL Instant Messenger (AIM) 4.7 allows remote malicious users to cause a denial of service (application crash) via a malformed WAV file.
aol instant messenger 4.7