PT-2001-2511 · Aol · Aol Instant Messenger

Published 2001-10-06 · Updated 2017-07-11 · CVE-2001-1417

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 4.7

Description The issue allows remote attackers to cause a denial of service, resulting in the application hanging or crashing. This is achieved by using a buddy icon GIF file with length and width values that exceed the actual image data.

Recommendations For AOL Instant Messenger (AIM) version 4.7, avoid using buddy icon GIF files with malformed dimensions to prevent the application from hanging or crashing. As a temporary workaround, consider disabling the use of buddy icons until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2001-1417

Affected Products

Aol Instant Messenger

References · 7

• 🔥 http://securityfocus.com/archive/1/218920 · Exploit
• 🔥 http://securityfocus.com/archive/1/247707 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1417 · Security Note
• http://kb.cert.org/vuls/id/JARL-56TQEN · Note
• http://securityfocus.com/bid/3408 · Note
• http://kb.cert.org/vuls/id/710347 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7255 · Note