fkie_cve-2005-1655
Vulnerability from fkie_nvd
Published
2005-05-18 04:00
Modified
2025-04-03 01:03
Severity ?
Summary
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:aol:instant_messenger:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "B2E6F399-02F7-4D45-9810-7A3B2DCB0069", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.0.912:*:*:*:*:*:*:*", "matchCriteriaId": "60A5F43B-BF1D-4186-A72B-1DD5367A494B", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.0.996:*:*:*:*:*:*:*", "matchCriteriaId": "F4D7D3BC-DE4A-4D56-A239-90A5D23BDA22", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:*", "matchCriteriaId": "ED10DFD8-2532-466D-8EBB-F05081F2935D", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.1.1236:*:*:*:*:*:*:*", "matchCriteriaId": "CA2FD74E-8AB0-4A19-AE4E-0823F1AC63DD", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:*", "matchCriteriaId": "0D371BDC-9E31-4EB1-88E9-82C2976086E1", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:*", "matchCriteriaId": "64B46D19-9103-40C5-A6A4-D5BE8DF8276E", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.0.1415:*:*:*:*:*:*:*", "matchCriteriaId": "02FC8258-541C-47D9-81B7-F211451B1C65", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:*", "matchCriteriaId": "D47319C5-1E96-4AEB-ABA9-638DFF22BD56", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:*", "matchCriteriaId": "483C0045-4C10-4120-AB89-C36467993E25", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:*", "matchCriteriaId": "7577D890-E06A-477C-80BE-48075FB16437", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:*", "matchCriteriaId": "34B6D42F-9FD9-4E0D-BB59-8E65E817889C", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:*", "matchCriteriaId": "9C2B7D7B-DB48-458B-9CA5-813782BA600D", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:*", "matchCriteriaId": "FF19BBC6-C4F2-4636-8650-E178FFD6BF4C", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "E00F0805-8C73-43B1-87AC-744434046E59", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "3098DC2A-6A68-4160-9DAC-8F31A49BA45D", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*", "matchCriteriaId": "8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "D7577EED-D28B-430A-B554-CE40D9154893", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*", "matchCriteriaId": "172E406F-108C-4D9A-80AB-78CDF134C4A8", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "E81E472E-45B5-465B-B2D7-40F906AC31E9", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*", "matchCriteriaId": "50A04B5F-F17B-4177-861B-66DFD4FBE225", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "B2D8157E-3447-44BF-AC22-5A65F4C707E7", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*", "matchCriteriaId": "FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*", "matchCriteriaId": "9C4FA9B9-E98C-435C-9F7A-D62E348D92D9", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*", "matchCriteriaId": "E0ADB0D5-BD25-488D-87D3-426ABB036B7A", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*", "matchCriteriaId": "11FCCE0C-E6F9-4A01-872E-38C5F23C479E", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*", "matchCriteriaId": "E80E2514-9F43-48FB-B55E-094F45088D7C", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*", "matchCriteriaId": "2E553111-8B78-4B66-95BC-FD0EE897DDC4", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:4.8.2790:*:*:*:*:*:*:*", "matchCriteriaId": "AEB04B46-B3A6-40B1-9519-EA8896033961", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.0.2938:*:*:*:*:*:*:*", "matchCriteriaId": "81FDEE59-4E96-4AA7-BE33-9199CF9EA9BB", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.1.3036:*:*:*:*:*:*:*", "matchCriteriaId": "FD9C099B-C975-46A4-A9A2-F1160DDC0242", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.2.3292:*:*:*:*:*:*:*", "matchCriteriaId": "43DE333F-6793-4A80-8B61-3AF5EFD1B52F", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "6955CC4D-1130-46DB-819A-EAFB3BBDAB74", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.5.3415_beta:*:*:*:*:*:*:*", "matchCriteriaId": "1FDD88ED-D59C-4EA3-8C33-E255A39DC2F0", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.5.3595:*:*:*:*:*:*:*", "matchCriteriaId": "3331131F-F11D-4F6B-9C61-710030273D44", "vulnerable": true }, { "criteria": "cpe:2.3:a:aol:instant_messenger:5.9.3702:*:*:*:*:*:*:*", "matchCriteriaId": "AA116CAF-B99A-4B68-8200-9B2501829BD0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag." } ], "id": "CVE-2005-1655", "lastModified": "2025-04-03T01:03:51.193", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2005-05-18T04:00:00.000", "references": [ { "source": "cve@mitre.org", "tags": [ "Exploit" ], "url": "http://www.securityfocus.com/bid/13553" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit" ], "url": "http://www.securityfocus.com/bid/13553" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…