PT-2005-2848 · Aol · Aol Instant Messenger

Tseeker · Publicado 2005-06-08 · Atualizado 2024-02-08 · CVE-2005-1891

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) versions 5.9.3797 and earlier

Description The issue is related to the GIF parser in the ateimg32.dll component, which can be exploited by remote attackers to cause a denial of service (crash) by providing a malformed buddy icon. This malformed icon causes an integer underflow in a loop counter variable.

Recommendations For AOL Instant Messenger (AIM) versions 5.9.3797 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, avoid using buddy icons from untrusted sources to minimize the risk of exploitation.

Correção

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

CVE-2005-1891

Produtos afetados

Aol Instant Messenger

Referências · 5

• http://securitytracker.com/id?1014145 · Nota
• http://securityfocus.com/bid/13880 · Nota
• http://marc.info/?l=bugtraq&m=111816939928640&w=2 · Nota
• http://marc.info/?l=bugtraq&m=111817881214343&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1891 · Nota de Segurança