Description
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
References
- 5109 vdb-entry
- 20020508 Hole in AOL Instant Messenger mailing-list
- aim-addbuddy-bo(9058) vdb-entry
- 4709 vdb-entry
- VU#259435 third-party-advisory