PT-2001-2511 · Aol · Aol Instant Messenger

Publicado 2001-10-06 · Atualizado 2017-07-11 · CVE-2001-1417

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 4.7

Description The issue allows remote attackers to cause a denial of service, resulting in the application hanging or crashing. This is achieved by using a buddy icon GIF file with length and width values that exceed the actual image data.

Recommendations For AOL Instant Messenger (AIM) version 4.7, avoid using buddy icon GIF files with malformed dimensions to prevent the application from hanging or crashing. As a temporary workaround, consider disabling the use of buddy icons until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-1417

Produtos afetados

Aol Instant Messenger

Referências · 7

• 🔥 http://securityfocus.com/archive/1/218920 · Exploit
• 🔥 http://securityfocus.com/archive/1/247707 · Exploit
• http://kb.cert.org/vuls/id/JARL-56TQEN · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1417 · Nota de Segurança
• http://securityfocus.com/bid/3408 · Nota
• http://kb.cert.org/vuls/id/710347 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7255 · Nota