Description
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
References
- VU#507771 third-party-advisory
- aim-html-comments-dos(7233) vdb-entry
- http://www.kb.cert.org/vuls/id/JARL-56TPTN
- 3398 vdb-entry
- 20011230 Windows AIM Client Exploits mailing-list
- 20011002 AIM 0day DoS mailing-list