home *** CD-ROM | disk | FTP | other *** search
-
- [ http://www.rootshell.com/ ]
-
- From no@mcs.net Mon Jun 1 08:58:05 1998
- Date: Mon, 01 Jun 1998 10:45:45 -0500
- From: Invisi <no@mcs.net>
- To: info@rootshell.com
- Subject: AOL for Windows DoS/Exploit
-
- Well.. I thought this was something that some of you might get a kick out
- of... as well as informative. I also havent seen this on any other sites.
- here's the stuff...
-
- Tested on: AOL3.0 16-bit Windows, AOL3.0 32-bit Windows, AOL4.0 Windows
-
- Problem:
-
- AOL's Instant message's uses HTML. This enables there customers to change
- font sizes, colors, backgrounds, to suite there tastes. Well here is where
- the bug comes into play. All you simply have to do is send someone who is
- useing a AOL version, that uses the <font> tagg, a instant message of
-
- <font =
- 9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999>
-
- A AOL instant message has to be below a certain character size that can fit
- in one message. This goes beyond the valid size, as well as being a invalid
- parameter for <font>. It will cause your AOL software to freak out, and a
- GPF will occur. If your able to stick more 9's in there, then please do.
-
- Fix:
-
- Convert back to a older version of AOL for Windows, like 2.5 or before. Or,
- simply reject any Instant Messages by useing the $IM_OFF command. Since
- Instant Messages are a big part of AOL, most people keep there Instant
- Messages turned on.
-
- - Invisible
-