[6365] in bugtraq
AOL Instant Messenger Bug... AGAIN!
daemon@ATHENA.MIT.EDU (Karl Koscher)
Fri Mar 20 21:08:17 1998
Date: Thu, 20 Mar 1997 17:13:13 -0800
Reply-To: Karl Koscher <mrsaturn@TEENCITY.ORG>
From: Karl Koscher <mrsaturn@TEENCITY.ORG>
To: BUGTRAQ@NETSPACE.ORG
In the latest version of AOL's Instant Messenger, what appears to be another
buffer overflow bug has been discovered. Anyone with an older client can
send the message <TITLE> to any 1.7.466 user, and the recipient's AOLIM
client will crash. <TITLE> can also be put in your profile, effectivly
crashing AOLIM for people who look at your profile. While it has no effects
on the rest of the system, you may be unable to sign back on to AOLIM.
- Karl
