AIM Buddy Icon Overflow Vulnerability

This script is Copyright (C) 2005-2016 Tenable Network Security, Inc.


Synopsis :

The remote Windows host is susceptible to denial of service attacks.

Description :

According to the Windows registry, the version of AOL Instant
Messenger install on the remote host has an integer overflow in its
GIF parser, 'ateimg32.dll'. Using a specially crafted GIF file as a
buddy icon, an attacker can reportedly crash the affected host.

See also :

http://security-protocols.com/advisory/sp-x15-advisory.txt
http://seclists.org/bugtraq/2005/Jun/36
http://seclists.org/bugtraq/2005/Jun/43

Solution :

Unknown at this time.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)
CVSS Temporal Score : 6.7
(CVSS2#E:F/RL:U/RC:ND)
Public Exploit Available : true

Family: Windows

Nessus Plugin ID: 18432 (aim_buddy_icon_overflow.nasl)

Bugtraq ID: 13880

CVE ID: CVE-2005-1891

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now