CVE-2005-1655

AOL Instant Messenger <= 5.5.x - Denial of Service via Invalid Smiley Icon Location

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1655. PoCs published by [email protected].

AI-analyzed exploit summary The provided text describes a remote denial of service vulnerability in AOL Instant Messenger, triggered by malformed 'smiley' HTML code in chat invitations, file transfers, or game requests. The issue is reported to potentially cause a buffer overflow, though this is unconfirmed.

Description

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.

Exploits (1)

exploitdb WRITEUP VERIFIED
by [email protected] · textdoswindows
https://www.exploit-db.com/exploits/25633

The provided text describes a remote denial of service vulnerability in AOL Instant Messenger, triggered by malformed 'smiley' HTML code in chat invitations, file transfers, or game requests. The issue is reported to potentially cause a buffer overflow, though this is unconfirmed.

Classification
Writeup 80%
Attack Type
Dos
Complexity
Trivial
Reliability
Theoretical
Target: AOL Instant Messenger (version unspecified)
No auth needed
Prerequisites: Target must accept chat invitations, file transfers, or game requests
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13553

Scores

EPSS 0.0241
EPSS Percentile 82.5%

Details

Status published
Products (36)
aol/instant_messenger 1.2
aol/instant_messenger 2.0.912
aol/instant_messenger 2.0.996
aol/instant_messenger 2.0_n
aol/instant_messenger 2.1.1236
aol/instant_messenger 2.5.1366
aol/instant_messenger 2.5.1598
aol/instant_messenger 3.0.1415
aol/instant_messenger 3.0.1470
aol/instant_messenger 3.0_n
... and 26 more
Published May 18, 2005
Tracked Since Feb 18, 2026