Re: AOL Instant Messenger URL Crash

From: Adam Herscher (adamat_private)
Date: Wed Apr 21 1999 - 18:07:12 PDT

  • Next message: Marc Lehmann: "Re: Bash Bug"

    >I'm sorry if I was unclear in my first post.  The only way I've seen to
    >exploit this is to send someone a hyperlink in the form of
    >aim:addbuddy?=screenname and have them click on it.  (replacing
    "screenname"
    >with an actual screen name seems to give the same result)  You can also set
    >up a web page that will redirect your victim to a client crashing URL once
    >they've caught on to your evil little scheme. :p  I set up an example of
    >this at http://www.fazed.net/poof for testing purposes, of course.
    >
    >Adam Brown
    >SpunOne@IRC
    >http://www.fazed.net
    >http://www.webzone.net
    
    
    This doesn't seem to work on the Mac versions (tested 2.01.644)
    
    Adam Herscher (ajh-)
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:43:30 PDT