high7.5Public exploit code
CVE-2000-1094
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOL Instant Messenger 4.0/4.1.2010/4.2.1193 - BuddyIcon Buffer Overflow2000-12-12 · remote · windows · Verified
Impact
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Aim | before 4.3.2229 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=97668265628917&w=2
- http://marc.info/?l=bugtraq&m=97683774417132&w=2
- http://www.atstake.com/research/advisories/2000/a121200-1.txt
- http://www.osvdb.org/1692
- http://marc.info/?l=bugtraq&m=97668265628917&w=2
- http://marc.info/?l=bugtraq&m=97683774417132&w=2
- http://www.atstake.com/research/advisories/2000/a121200-1.txt
- http://www.osvdb.org/1692