bugtraq - Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <a4a571f6040812140020bcd11a@mail.gmail.com>
Date: Thu, 12 Aug 2004 17:00:29 -0400
From: High Pressure <pressure@...il.com>
To: Thor Larholm <tlarholm@...x.com>
Cc: bugtraq@...urityfocus.com,
	Windows NTBugtraq Mailing List <ntbugtraq@...tserv.ntbugtraq.com>
Subject: Re: AOL Instant Messenger "Away" Message Buffer Overflow Vulnerability


If you're running NT/2000/XP, you can delete everything under the key
and make it read-only -- or just deny everyone access to the key.

On Wed, 11 Aug 2004 14:02:50 -0700, Thor Larholm <tlarholm@...x.com> wrote:
> Deleting the "HKEY_CLASSES_ROOT\aim" registry key is not a permanent
> mitigation but a per-session change that has to be implemented every
> time AOL Instant Messenger is instantiated. The reason for this is that
> if the HKCR\aim key is missing when AIM is launched AIM will simply
> recreate the key and thus the URL protocol.

-- 
Please don't send anything confidential to this address. More info:
http://www.gmail-is-too-creepy.com/