mailing list archives
AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability
From: <homicidal () gmail com>
Date: 10 Aug 2004 20:11:37 -0000
THIS WAS NOT DISCOVERED BY ME.
Source: Secunia (http://secunia.com/advisories/12198/)
Ryan McGeehan has reported a vulnerability in AOL Instant Messenger (AIM), which can be exploited by malicious people
to compromise a user's system.
The vulnerability is caused due to a boundary error within the handling of "Away" messages and can be exploited to
cause a stack-based buffer overflow by supplying an overly long "Away" message (about 1024 bytes). A malicious website
can exploit this via the "aim:" URI handler by passing an overly long argument to the "goaway?message" parameter.
Successful exploitation allows execution of arbitrary code on a user's system when e.g. a malicious website is visited
with certain browsers.
The vulnerability has been confirmed in version 5.5.3595. Other versions may also be affected.
NOTE: Various other issues were also reported, where a large amount of resources can be consumed on a user's system.
The vendor has contacted Secunia and recommends that users install a beta version, which addresses the vulnerability,
or remove support for the "aim:" URI handler by deleting the "HKEY_CLASSES_ROOT\aim" registry key.
A new non-beta version is forthcoming.
Provided and/or discovered by:
The vulnerability was discovered independently by the following around the same time:
1) Ryan McGeehan and Kevin Benes, TheBillyGoatCurse.com.
2) Matt Murphy
- AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability homicidal (Aug 10)