AOL Instant Messenger Long Filename Denial of Service Vulnerability

Bugtraq ID:	3407
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-1420
Remote:	Yes
Local:	No
Published:	Oct 06 2001 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Posted to Bugtraq by Robbie Saunders <[email protected]> on Oct 6, 2001.
Vulnerable:	AOL Instant Messenger 4.7 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows CE 3.0 - Microsoft Windows CE 2.0 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

AOL Instant Messenger Long Filename Denial of Service Vulnerability

A vulnerability exists in AOL Instant Messenger (AIM) which could cause the AIM client to stop responding.

If a file being transferred from one client to another, has an unusually long filename. It is possible for the recipient's AIM client to crash.

AOL Instant Messenger Long Filename Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AOL Instant Messenger Long Filename Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AOL Instant Messenger Long Filename Denial of Service Vulnerability

References:

• AOL Instant Messenger Home Page (AOL)