Exploitation Summary
EIP tracks 4 public exploits for CVE-2004-0636.
PoCs published by Metasploit, John Bissell, mandragore, including Metasploit module exploits/windows/browser/aim_goaway.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in AOL Instant Messenger's 'goaway' URI handler via an SEH overwrite, allowing arbitrary code execution. The exploit is delivered via an HTML iframe with a maliciously crafted 'aim:goaway' URI.
Description
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
Exploits (4)
This Metasploit module exploits a buffer overflow in AOL Instant Messenger's 'goaway' URI handler via an SEH overwrite, allowing arbitrary code execution. The exploit is delivered via an HTML iframe with a maliciously crafted 'aim:goaway' URI.
This exploit targets a buffer overflow vulnerability in AIM's away message handling. It uses a long string of 'A's to overwrite the return address and includes shellcode to execute arbitrary commands, with options for reverse shell connectivity.
This is a local exploit for AOL Instant Messenger (AIM) 5.5.3595 that leverages a buffer overflow vulnerability to execute arbitrary shellcode, resulting in a bind shell on port 1180. The exploit constructs a malicious URL and uses ShellExecute to trigger the vulnerability.
This Metasploit module exploits a buffer overflow in AOL Instant Messenger's 'goaway' URI handler via an HTTP server. It leverages SEH overwrite to achieve arbitrary code execution by sending a maliciously crafted 'aim:goaway' URI with an oversized 'message' parameter.