CVE-2002-0785

AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*

History

20 Nov 2024, 23:39

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html - Exploit, Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html - Exploit, Vendor Advisory
References () http://www.iss.net/security_center/static/9058.php - Vendor Advisory () http://www.iss.net/security_center/static/9058.php - Vendor Advisory
References () http://www.kb.cert.org/vuls/id/259435 - US Government Resource () http://www.kb.cert.org/vuls/id/259435 - US Government Resource
References () http://www.osvdb.org/5109 - () http://www.osvdb.org/5109 -
References () http://www.securityfocus.com/bid/4709 - Vendor Advisory () http://www.securityfocus.com/bid/4709 - Vendor Advisory

Information

Published : 2002-08-12 04:00

Updated : 2024-11-20 23:39


NVD link : CVE-2002-0785

Mitre link : CVE-2002-0785

CVE.ORG link : CVE-2002-0785


JSON object : View

Products Affected

aol

  • instant_messenger