Bugtraq mailing list archives

AOL Instant Messenger URL Crash

From: mad () SKILL ORG (Adam Brown)
Date: Mon, 19 Apr 1999 22:00:00 -0500


There is a bug in the newer versions of AOL's Instant Messenger that will
cause the client to crash when exploited.  All builds of version 2.0 that
I've tested seem to be vulnerable, although I have not done extensive
version testing.  AOL was notified of this about two weeks ago.  To exploit
this bug, send a hyperlink in this format: aim:addbuddy?=screenname

Have fun,

SpunOne

http://www.fazed.net

http://www.webzone.net

Current thread:

Re: bug in ssh allowing to be invissible, (continued)
- - - Re: bug in ssh allowing to be invissible Pete (Apr 20)
    - Re: bug in ssh allowing to be invissible Joe Gross (Apr 20)
    - NetBSD Security Advisory 1999-009 matthew green (Apr 20)
    - Bash Bug Shadow (Apr 20)
    - Re: Bash Bug Marc Lehmann (Apr 21)
    - Re: Bash Bug Pavel Kankovsky (Apr 22)
    - Re: Bash Bug Chet Ramey (Apr 22)
    - L0pht Security Advisory: Cold Fusion App Server Weld Pond (Apr 21)
    - Re: Plain text passwords--necessary Densin Roy. (Apr 19)
    - Re: Plain text passwords--necessary Daniel Alex Finkelstein (Apr 19)
    - AOL Instant Messenger URL Crash Adam Brown (Apr 19)
    - Re: AOL Instant Messenger URL Crash Daniel Reed (Apr 20)
    - Shopping Carts exposing CC data Joe (Apr 19)
    - Re: Shopping Carts exposing CC data Joe (Apr 20)
    - Outlook 98 allows spoofing internal users Nate Lawson (Apr 20)
    - Re: Outlook 98 allows spoofing internal users Peter van Dijk (Apr 25)
    - Re: Shopping Carts exposing CC data Louis R. Marascio (Apr 20)
    - eBay password stealing with JavaScript Michael K. Sanders (Apr 20)
    - Re: eBay password stealing with JavaScript Paul Festa (Apr 21)
    - Bug in Linux Mount Jacek Konieczny (Apr 20)
    - Re: Bug in Linux Mount Meelis Roos (Apr 20)

(Thread continues...)