The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1893
http://www.securityfocus.com/bid/13880
http://securitytracker.com/id?1014145