[10275] in bugtraq
AOL Instant Messenger URL Crash
daemon@ATHENA.MIT.EDU (Adam Brown)
Tue Apr 20 14:10:16 1999
Date: Mon, 19 Apr 1999 22:00:00 -0500
Reply-To: Adam Brown <mad@SKILL.ORG>
From: Adam Brown <mad@SKILL.ORG>
To: BUGTRAQ@NETSPACE.ORG
There is a bug in the newer versions of AOL's Instant Messenger that will
cause the client to crash when exploited. All builds of version 2.0 that
I've tested seem to be vulnerable, although I have not done extensive
version testing. AOL was notified of this about two weeks ago. To exploit
this bug, send a hyperlink in this format: aim:addbuddy?=screenname
Have fun,
SpunOne
http://www.fazed.net
http://www.webzone.net
