Show filters
65 Total Results
Displaying 31-40 of 65
Sort by:
Attacker Value
Unknown
CVE-2006-0526
Disclosure Date: February 02, 2006 (last updated February 22, 2025)
The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.
0
Attacker Value
Unknown
CVE-2006-0316
Disclosure Date: January 19, 2006 (last updated February 22, 2025)
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2005-2597
Disclosure Date: August 17, 2005 (last updated February 22, 2025)
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.
0
Attacker Value
Unknown
CVE-2005-1891
Disclosure Date: June 09, 2005 (last updated February 22, 2025)
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
0
Attacker Value
Unknown
CVE-2005-1655
Disclosure Date: May 18, 2005 (last updated February 22, 2025)
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
0
Attacker Value
Unknown
CVE-2001-1420
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.
0
Attacker Value
Unknown
CVE-2004-2373
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
0
Attacker Value
Unknown
CVE-2004-0636
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
0
Attacker Value
Unknown
CVE-2003-1503
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.
0
Attacker Value
Unknown
CVE-2002-1813
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
0
