CVE-2006-0629

CVE-2006-0629 describes an unspecified vulnerability in AOL Instant Messenger (AIM) version 5.9.3861. This flaw allows a user-assisted remote attacker to trigger a client crash, leading to a denial of service, and potentially execute arbitrary code. The attack involves tricking a user into requesting Buddy Info for an excessively long screen name, which could induce a buffer overflow. The vulnerability has a CVSS score of 5.1, indicating a medium severity. It requires user interaction (user-assisted) and high attack complexity (AC:H), but can be exploited remotely (AV:N). The potential impact includes partial confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.