Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2012-0268

Disclosure Date: January 19, 2012 (last updated October 04, 2023)
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
0
Attacker Value
Unknown

CVE-2005-2137

Disclosure Date: July 05, 2005 (last updated February 22, 2025)
Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors.
0
Attacker Value
Unknown

CVE-2005-1655

Disclosure Date: May 18, 2005 (last updated February 22, 2025)
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
0
Attacker Value
Unknown

CVE-2002-1831

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.
0
Attacker Value
Unknown

CVE-2002-1698

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument in the message header.
0
Attacker Value
Unknown

CVE-2002-0592

Disclosure Date: June 18, 2002 (last updated February 22, 2025)
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
0
Attacker Value
Unknown

CVE-2002-0228

Disclosure Date: May 16, 2002 (last updated February 22, 2025)
Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).
0
Attacker Value
Unknown

CVE-2000-1093

Disclosure Date: January 09, 2001 (last updated February 22, 2025)
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
0