AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
                
            References
                    | Link | Resource | 
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html | Exploit Vendor Advisory | 
| http://www.iss.net/security_center/static/9058.php | Vendor Advisory | 
| http://www.kb.cert.org/vuls/id/259435 | US Government Resource | 
| http://www.osvdb.org/5109 | |
| http://www.securityfocus.com/bid/4709 | Vendor Advisory | 
| http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html | Exploit Vendor Advisory | 
| http://www.iss.net/security_center/static/9058.php | Vendor Advisory | 
| http://www.kb.cert.org/vuls/id/259435 | US Government Resource | 
| http://www.osvdb.org/5109 | |
| http://www.securityfocus.com/bid/4709 | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    20 Nov 2024, 23:39
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html - Exploit, Vendor Advisory | |
| References | () http://www.iss.net/security_center/static/9058.php - Vendor Advisory | |
| References | () http://www.kb.cert.org/vuls/id/259435 - US Government Resource | |
| References | () http://www.osvdb.org/5109 - | |
| References | () http://www.securityfocus.com/bid/4709 - Vendor Advisory | 
Information
                Published : 2002-08-12 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-0785
Mitre link : CVE-2002-0785
CVE.ORG link : CVE-2002-0785
JSON object : View
Products Affected
                aol
- instant_messenger
CWE
                