CVE-2004-0636

This Metasploit module exploits a buffer overflow in AOL Instant Messenger's 'goaway' URI handler via an SEH overwrite, allowing arbitrary code execution. The exploit is delivered via an HTML iframe with a maliciously crafted 'aim:goaway' URI.

This exploit targets a buffer overflow vulnerability in AIM's away message handling. It uses a long string of 'A's to overwrite the return address and includes shellcode to execute arbitrary commands, with options for reverse shell connectivity.

This is a local exploit for AOL Instant Messenger (AIM) 5.5.3595 that leverages a buffer overflow vulnerability to execute arbitrary shellcode, resulting in a bind shell on port 1180. The exploit constructs a malicious URL and uses ShellExecute to trigger the vulnerability.

This Metasploit module exploits a buffer overflow in AOL Instant Messenger's 'goaway' URI handler via an HTTP server. It leverages SEH overwrite to achieve arbitrary code execution by sending a maliciously crafted 'aim:goaway' URI with an oversized 'message' parameter.