Vulnerability Development mailing list archives

AIM 3.0 Buffer Overflow exploit

From: lewkir () YAHOO COM (lewkir () YAHOO COM)
Date: Fri, 17 Mar 2000 17:32:56 -0000


Don't know much about it except that it's perhaps sending an
invalid ascii or unicode character, but if you send "&#770;"
(no quotes) to a remote user, it will crash their AIM
session, and possibly their computer.

This bug does not exist in 3.5, and if you download 3.0
today, AOL has fixed this hole w/o telling anyone about it
(i.e. if you downloaded 3.0 in the not recent past, you will
be vulnerable).

If the "attacker" is running the unpatched AIM, it will
crash his/her computer as well.

gAIM doesn't have this vulnerability.

Current thread:

DoS in ArGoSoft FTP Server, Version 1.04 (1.0.4.4) for win*, (continued)
- - - DoS in ArGoSoft FTP Server, Version 1.04 (1.0.4.4) for win* Knud Erik Højgaard (Feb 11)
    - Re: Extending the FTP "ALG" vulnerability to any FTP client Dug Song (Mar 11)
    - Security auditing of network infrastructure Martin M Samson (Mar 11)
    - information being stored from cgi forms Bob Johnson (Mar 10)
    - Re: information being stored from cgi forms Crispin Cowan (Mar 10)
- Re: spoofing the ethernet address Timothy J. Miller (Mar 13)
- Re: spoofing the ethernet address Arnold, Jamie (Mar 14)
  - Re: spoofing the ethernet address John Flux (Mar 14)
  - Re: spoofing the ethernet address Juan M. Courcoul (Mar 15)
  - Linux Mandrake 6.1 PAM/userhelper exploit Paulo Ribeiro (Mar 16)
  - AIM 3.0 Buffer Overflow exploit lewkir () YAHOO COM (Mar 17)
    - Re: AIM 3.0 Buffer Overflow exploit Jamal Hendershot (Mar 19)
    - Re: AIM 3.0 Buffer Overflow exploit - - (Mar 21)
- Re: spoofing the ethernet address Arnold, Jamie (Mar 15)
- Re: spoofing the ethernet address James A. Robbins (Mar 15)
- Re: spoofing the ethernet address Pierre Landau (Mar 21)
  - Re: spoofing the ethernet address Ex Machina (Mar 22)
    - Re: spoofing the ethernet address (license managers) Eric Sherrill (Mar 24)
    - IPSec research Bep Verberk (Mar 24)
    - Re: IPSec research Dug Song (Mar 24)
    - Re: IPSec research Mike Hudack (Mar 25)

(Thread continues...)