The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=111816939928640&w=2 | Mailing List |
http://marc.info/?l=bugtraq&m=111817881214343&w=2 | Mailing List |
http://securitytracker.com/id?1014145 | Broken Link Third Party Advisory VDB Entry |
http://www.securityfocus.com/bid/13880 | Broken Link Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2005-06-09 04:00
Updated : 2024-02-08 15:44
NVD link : CVE-2005-1891
Mitre link : CVE-2005-1891
CVE.ORG link : CVE-2005-1891
JSON object : View
Products Affected
microsoft
- windows
aol
- aim
CWE
CWE-191
Integer Underflow (Wrap or Wraparound)