Vulnerability Development mailing list archives

Re: AOL IM 4.7 d0s 0-Day


From: Matthew Sachs <matthewg () zevils com>
Date: Wed, 3 Oct 2001 06:33:36 -0400

On Mon, Oct 01, 2001 at 09:38:25PM -0500, Marukka wrote:
I tried sending 
"<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.<!--.
[...]
10 times in a row with Netscape 6.1 Mozilla/5.0 (Macintosh; U; PPC; en-US;
rv:0.9.2) Gecko/20010726 Netscape6/6.1 and afterwards whenever I would try
to send a im to another client it would say "Send failed for some reason.".
Then my friend im'ed me back saying he was still online and once again I was
able to IM again. Quite strange.

10 isn't enough.  It takes much more then that.  Also, I don't know
about Netscape, but it looks like you can't send the message with
WinAIM; it translates < to &lt;
        --Matt


Current thread: