Skip to content

CVE-2005-1655 AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

MediumCVSS 5.0 EPSS 2.4% PoC
Published
Updated
Exploit status
Proof-of-concept only

Description

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

Affected products

ProductAffected versionsFixed in
aol instant messenger = 1.2 No fix listed
aol instant messenger = 2.0.912 No fix listed
aol instant messenger = 2.0.996 No fix listed
aol instant messenger = 2.0_n No fix listed
aol instant messenger = 2.1.1236 No fix listed
aol instant messenger = 2.5.1366 No fix listed
aol instant messenger = 2.5.1598 No fix listed
aol instant messenger = 3.0.1415 No fix listed
aol instant messenger = 3.0.1470 No fix listed
aol instant messenger = 3.0_n No fix listed
aol instant messenger = 3.5.1635 No fix listed
aol instant messenger = 3.5.1670 No fix listed
aol instant messenger = 3.5.1808 No fix listed
aol instant messenger = 3.5.1856 No fix listed
aol instant messenger = 4.0 No fix listed
aol instant messenger = 4.1 No fix listed
aol instant messenger = 4.1.2010 No fix listed
aol instant messenger = 4.2 No fix listed
aol instant messenger = 4.2.1193 No fix listed
aol instant messenger = 4.3 No fix listed
aol instant messenger = 4.3.2229 No fix listed
aol instant messenger = 4.4 No fix listed
aol instant messenger = 4.5 No fix listed
aol instant messenger = 4.6 No fix listed
aol instant messenger = 4.7 No fix listed
Show 11 more
ProductAffected versionsFixed in
aol instant messenger = 4.7.2480 No fix listed
aol instant messenger = 4.8.2616 No fix listed
aol instant messenger = 4.8.2646 No fix listed
aol instant messenger = 4.8.2790 No fix listed
aol instant messenger = 5.0.2938 No fix listed
aol instant messenger = 5.1.3036 No fix listed
aol instant messenger = 5.2.3292 No fix listed
aol instant messenger = 5.5 No fix listed
aol instant messenger = 5.5.3415_beta No fix listed
aol instant messenger = 5.5.3595 No fix listed
aol instant messenger = 5.9.3702 No fix listed

References

  • 13553 exploit vdb-entry