Description
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
References
- 3408 vdb-entry
- http://www.kb.cert.org/vuls/id/JARL-56TQEN
- aim-large-buddyicon-dos(7255) vdb-entry
- 20011006 AIM Exploits mailing-list
- VU#710347 third-party-advisory
- 20011230 Windows AIM Client Exploits mailing-list