CVE-2005-1655

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-18

Last modified

2024-09-16

Affected products

• Instant Messenger (Aol)

References

• http://www.securityfocus.com/bid/13553