AIM Exploit!!

From: tuna (tunaat_private)
Date: Fri Jul 19 2002 - 17:34:53 PDT

  • Next message: rwertenbat_private: "Re: AIM forced behavior "issue" Re:ICQ and MSIE allow execution of arbitrary code"

    ----- 420 --------------------- 420 ---------------- 420-----------------
    
    wh4T uP d0oDZ th1z is THE HERBaLiSER [420] br1ngin u th3 k-phr3$h3zT
    w4r3z ar0und!@#$#$$
    
    aff3ctZ: version 4.8.2790 (and lower) Windows32 AIM Client
    s3v3r1ty: u c0uld g3t f1r3d duDeZ!@#!##
    
    vulnerab1litty: u c4n m4k3 luzerS cl1k URLs they th1nk p0int elsewh3r!@@
    		(a r1ghte0us g00d l4f indeed!!!!!)
    
    expl0it: s3l3ct th3 "link" button 0n th3 t00lbar in an act1v3 IM sess10n,
    	 for l1nk teXt put 1n s0m3 PG rat3d l1nk, then 1n th3 URL b0x on
             t0p puT a r34L n4Zty l1nk!@@@@ (fUn insu3z dud3Z eye sw34r
             1t!!!!@) bl4mm0!!@@@ th4tz 1t n0 onethirtyseven or n0th1ng!!!
    
    ex4mpl3 0f expl0it us3d in w1ld:
    
    TeenSinks420: http://www.ebay.com/Show.cgi?ItemId=43520921
    TeenSinks420: can i ahve loan for that
    MyOLDBoSSCEO: what the
    MyOLDBoSSCEO: aklshfkjahf
    (l1nk r34lly p0int3d @ http://www.dms100.org/worksucks)
    
    an0th3r sc3nar10:
    
    HerBAliSER2k2:
    http://news.yahoo.com/news?tmpl=story2&cid=362&ncid=815&e=3&u=/trib/20020719/lo_latimes/court_accepts_medical_pot_use
    HerBAliSER2k2: they write story about u LOL
    BANGHOLIOS signed off at 5:19:23 PM.
    
    b1g pr0PZ t0 g0bbl3z 4 th4t apAych33 shYT buT th1Z sh1t is th3 h4rk0r
    w4r3z (c4nt t0uch d1$!@@@@@@@)
    
    - HERB
    
    ----- 420 --------------------- 420 ---------------- 420-----------------
    



    This archive was generated by hypermail 2b30 : Sat Jul 20 2002 - 08:38:30 PDT