PT-2005-2848 · Aol · Aol Instant Messenger

Tseeker · Published 2005-06-08 · Updated 2024-02-08 · CVE-2005-1891

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) versions 5.9.3797 and earlier

Description The issue is related to the GIF parser in the ateimg32.dll component, which can be exploited by remote attackers to cause a denial of service (crash) by providing a malformed buddy icon. This malformed icon causes an integer underflow in a loop counter variable.

Recommendations For AOL Instant Messenger (AIM) versions 5.9.3797 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, avoid using buddy icons from untrusted sources to minimize the risk of exploitation.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2005-1891

Affected Products

Aol Instant Messenger

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-1891 · Security Note
• http://securitytracker.com/id?1014145 · Note
• http://securityfocus.com/bid/13880 · Note
• http://marc.info/?l=bugtraq&m=111816939928640&w=2 · Note
• http://marc.info/?l=bugtraq&m=111817881214343&w=2 · Note