full-disclosure - -ADVISORY- | x Thu Mar 16 02:49:11 EST 2006 x

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu Mar 16 08:08:05 2006
From: jaervosz at gentoo.org (jaervosz@...too.org)
Subject: -ADVISORY- | x Thu Mar 16 02:49:11 EST 2006 x |
	Integer Overflow in AOL Client Software

-ADVISORY- | x Thu Mar 16 02:49:11 EST 2006 x | Integer Overflow in AOL Client Software

I. DESCRIPTION
AOL Client Software incorrectly parses integer data, and this can be used to execute arbitrary code.

II. WORKAROUND
There was no identified workarounds regarding the vulnerability at hand.
III. VENDOR RESPONSE
AOL Client Software is extended no identified commentary about this problem at hand.
APPENDIX A VENDOR INFORMATION
http://www.aol.com

APPENDIX B REFERENCES
RFC 6920

CONTACT
Sune Kloppenborg Jeppesen jaervosz@...too.org

CISSP CSFA