AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Instant_messenger | Aol | 2.1.1236 | 2.1.1236 |
Instant_messenger | Aol | 1.2 | 1.2 |
Instant_messenger | Aol | 4.2 | 4.2 |
Instant_messenger | Aol | 4.0 | 4.0 |
Instant_messenger | Aol | 5.0.2938 | 5.0.2938 |
Instant_messenger | Aol | 5.5.3595 | 5.5.3595 |
Instant_messenger | Aol | 3.5.1856 | 3.5.1856 |
Instant_messenger | Aol | 4.8.2646 | 4.8.2646 |
Instant_messenger | Aol | 4.5 | 4.5 |
Instant_messenger | Aol | 2.0.912 | 2.0.912 |
Instant_messenger | Aol | 4.3 | 4.3 |
Instant_messenger | Aol | 3.0_n | 3.0_n |
Instant_messenger | Aol | 2.0.996 | 2.0.996 |
Instant_messenger | Aol | 4.1.2010 | 4.1.2010 |
Instant_messenger | Aol | 4.6 | 4.6 |
Instant_messenger | Aol | 3.0.1415 | 3.0.1415 |
Instant_messenger | Aol | 3.5.1635 | 3.5.1635 |
Instant_messenger | Aol | 5.9.3702 | 5.9.3702 |
Instant_messenger | Aol | 5.5 | 5.5 |
Instant_messenger | Aol | 2.0_n | 2.0_n |
Instant_messenger | Aol | 4.3.2229 | 4.3.2229 |
Instant_messenger | Aol | 2.5.1598 | 2.5.1598 |
Instant_messenger | Aol | 4.8.2616 | 4.8.2616 |
Instant_messenger | Aol | 3.0.1470 | 3.0.1470 |
Instant_messenger | Aol | 3.5.1808 | 3.5.1808 |
Instant_messenger | Aol | 5.1.3036 | 5.1.3036 |
Instant_messenger | Aol | 4.2.1193 | 4.2.1193 |
Instant_messenger | Aol | 3.5.1670 | 3.5.1670 |
Instant_messenger | Aol | 4.7 | 4.7 |
Instant_messenger | Aol | 2.5.1366 | 2.5.1366 |
Instant_messenger | Aol | 5.2.3292 | 5.2.3292 |
Instant_messenger | Aol | 4.7.2480 | 4.7.2480 |
Instant_messenger | Aol | 4.8.2790 | 4.8.2790 |
Instant_messenger | Aol | 4.4 | 4.4 |
Instant_messenger | Aol | 5.5.3415_beta | 5.5.3415_beta |
Instant_messenger | Aol | 4.1 | 4.1 |