Home / vulnerabilities

PDF

aol95-overflow.txt

Posted on 04 February 2010
Source : packetstormsecurity.org Link

 

Product:

AOL 9.5

Vulnerability:

File Parsing Heap-based Buffer Overflow

Description:

Hellcode Research has discovered a heap overflow vulnerability in AOL 9.5
Opening a malformed vCard file (.vcf) with AOL 9.5 causes a crash on "waol.exe"
Successful exploitation may allow execution of arbitrary code.

Credits:

Discovered by Celil 'karak0rsan' Unuver and murderkey from Hellcode Research

http://tcc.hellcode.net

Original Advisory:

http://tcc.hellcode.net/advisories/hellcode-adv009.txt

 

TOP