CVE:CVE-2005-1655
CNNVD:CNNVD-200505-1117
AOL Instant Messenger 5.5.x及更早版本允许远程攻击者通过在字体标签的sml参数内的无效的表情符图标位置来发起拒绝服务攻击(客户端崩溃)。
solution:Upgrade aol instant_messenger to a higher version than 1.2,2.0.912,2.0.996,2.0_n,2.1.1236,2.5.1366,2.5.1598,3.0.1415,3.0.1470,3.0_n,3.5.1635,3.5.1670,3.5.1808,3.5.1856,4.0,4.1,4.1.2010,4.2,4.2.1193,4.3,4.3.2229,4.4,4.5,4.6,4.7,4.7.2480,4.8.2616,4.8.2646,4.8.2790,5.0.2938,5.1.3036,5.2.3292,5.5,5.5.3415_beta,5.5.3595,5.9.3702,and avoid the version 1.2,2.0.912,2.0.996,2.0_n,2.1.1236,2.5.1366,2.5.1598,3.0.1415,3.0.1470,3.0_n,3.5.1635,3.5.1670,3.5.1808,3.5.1856,4.0,4.1,4.1.2010,4.2,4.2.1193,4.3,4.3.2229,4.4,4.5,4.6,4.7,4.7.2480,4.8.2616,4.8.2646,4.8.2790,5.0.2938,5.1.3036,5.2.3292,5.5,5.5.3415_beta,5.5.3595,5.9.3702