icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

AOL Instant Messenger <= 4.3.2229 Multiple Overflows

High

Synopsis

The remote host is vulnerable to a buffer overflow

Description

The remote host is running AOL Instant Messenger (AIM). Version prior to and including 4.3.2229 contain buffer overflows in the code that processes AIM URLs. URLs containing "aim://" along with exceptionally long goim and screenname parameter strings may crash a remote AIM client provided the victim clicks on the link. A victim does NOT have to be running AIM for a remote attacker to exploit this vulnerability.

Solution

Upgrade to the latest version of AOL Instant Messenger.