[Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow- Vulnerability

From: karakorsankara@hotmail.com
To: bugtraq@securityfocus.com
Cc:
Subject: [Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow- Vulnerability
Date:


Product:

AOL 9.5

Vulnerability:

File Parsing Heap-based Buffer Overflow

Description:

Hellcode Research has discovered a heap overflow vulnerability in AOL 9.5
Opening a malformed vCard file (.vcf) with AOL 9.5 causes a crash on "waol.exe"
Successful exploitation may allow execution of arbitrary code.

Credits:

Discovered by Celil 'karak0rsan' Unuver and murderkey from Hellcode Research

http://tcc.hellcode.net

Original Advisory:

http://tcc.hellcode.net/advisories/hellcode-adv009.txt





Copyright © 1995-2020 LinuxRocket.net. All rights reserved.