CVE-2007-4901 Information

Description

The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32.1 AIM Pro and AIM Lite does not properly constrain the use of mshtml.dll’s web script and HTML functionality for incoming instant messages which allows remote attackers to place HTML into unexpected contexts or execute arbitrary code as demonstrated by writing arbitrary HTML to a notification window and writing contents of arbitrary local image files to this window via IMG SRC.

Reference

http://aviv.raffon.net/2007/09/25/ReadyAIMFire.aspx http://secunia.com/advisories/26786 http://securityreason.com/securityalert/3136 http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1924 http://www.securityfocus.com/archive/1/479199/100/0/threaded http://www.securityfocus.com/archive/1/479435/100/0/threaded http://www.securityfocus.com/archive/1/480587/100/0/threaded http://www.securityfocus.com/archive/1/480647/100/0/threaded http://www.securityfocus.com/bid/25659