CVE-2004-0636

Related Files

AOL Instant Messenger goaway Overflow

Posted Nov 26, 2009

Authored by skape, thief | Site metasploit.com

This Metasploit module exploits a flaw in the handling of AOL Instant Messenger's 'goaway' URI handler. An attacker can execute arbitrary code by supplying a overly sized buffer as the 'message' parameter. This issue is known to affect AOL Instant Messenger 5.5.

tags | exploit, arbitrary

advisories | CVE-2004-0636

SHA-256 | 3f9f669a44333e450e5fc4a71660d89955d2e85848f584c1c6d9d52d001ed850

Download | Favorite | View

aimAway.c

Posted Aug 14, 2004

Authored by mandragore

Local proof of concept exploit for AIM 5.5.3595 that makes use of the Away Message vulnerability. Binds a shell to port 1180.

tags | exploit, shell, local, proof of concept

advisories | CVE-2004-0636

SHA-256 | 1e6d4bb64f8f6ded58619d8f030cb808e1322f3259b38f11c15015cfad30f9ba

Download | Favorite | View