AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7255
http://www.securityfocus.com/bid/3408