NetSight
medium5.0Public exploit code

CVE-2005-1655

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml para…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

Affected products

VendorProductAffected versions
AolInstant Messenger
Versions 1.2, 2.0.912, 2.0.996, 2.0_n, 2.1.1236, 2.5.1366

References