Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=97668265628917&w=2 | Third Party Advisory |
http://marc.info/?l=bugtraq&m=97683774417132&w=2 | Third Party Advisory |
http://www.atstake.com/research/advisories/2000/a121200-1.txt | Broken Link Exploit Patch Vendor Advisory |
http://www.osvdb.org/1692 | Broken Link |
Configurations
History
No history.
Information
Published : 2001-01-09 05:00
Updated : 2024-02-09 03:20
NVD link : CVE-2000-1094
Mitre link : CVE-2000-1094
CVE.ORG link : CVE-2000-1094
JSON object : View
Products Affected
aol
- aim
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')