Aol Instant Messenger vulnerabilities

CVE-2002-1953 [MEDIUM] CVE-2002-1953: Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 a Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.

CVE-2001-1420 [MEDIUM] CVE-2001-1420: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application cr AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.

CVE-2001-1417 [MEDIUM] CVE-2001-1417: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application ha AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.

CVE-2001-1416 [MEDIUM] CVE-2001-1416: Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags.

CVE-1999-0486 [MEDIUM] CVE-1999-0486: Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.

CVE-2000-0383 [MEDIUM] CVE-2000-0383: The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transfer The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.

CVE-2000-0190 [MEDIUM] CVE-2000-0190: AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a messag AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.

CVE-2001-1421 [MEDIUM] CVE-2001-1421: AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (ap AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.

CVE-2001-1419 [MEDIUM] CVE-2001-1419: AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of servic AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.

CVE-2001-1418 [MEDIUM] CVE-2001-1418: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application cr AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.