Page 2 of 28 results (0.003 seconds)

CVSS: 7.5EPSS: 1%CPEs: 7EXPL: 1

CVE-2002-1953

https://notcve.org/view.php?id=CVE-2002-1953

31 Dec 2002 — Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy. • http://online.securityfocus.com/archive/1/288980 •

CVSS: 6.1EPSS: 3%CPEs: 3EXPL: 3

CVE-2002-2169 – AOL Instant Messenger 4.x - Unauthorized Actions

https://notcve.org/view.php?id=CVE-2002-2169

31 Dec 2002 — Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL. • https://www.exploit-db.com/exploits/21619 •

CVSS: 7.5EPSS: 2%CPEs: 14EXPL: 1

CVE-2002-0785

https://notcve.org/view.php?id=CVE-2002-0785

12 Aug 2002 — AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow. • http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html •

CVSS: 9.1EPSS: 9%CPEs: 9EXPL: 3

CVE-2002-0591 – AOL Instant Messenger 4.x - Arbitrary File Creation

https://notcve.org/view.php?id=CVE-2002-0591

11 Jun 2002 — Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename. • https://www.exploit-db.com/exploits/21386 •

CVSS: 7.5EPSS: 0%CPEs: 27EXPL: 0

CVE-2002-0592

https://notcve.org/view.php?id=CVE-2002-0592

11 Jun 2002 — AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user. • http://online.securityfocus.com/archive/1/269006 •

CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 1

CVE-2002-0362

https://notcve.org/view.php?id=CVE-2002-0362

29 May 2002 — Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711. • http://marc.info/?l=bugtraq&m=102071080509955&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2002-1591

https://notcve.org/view.php?id=CVE-2002-1591

08 Apr 2002 — AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions. • http://www.informationweek.com/story/IWK20010927S0021 •

CVSS: 10.0EPSS: 27%CPEs: 8EXPL: 3

CVE-2002-0005 – AOL Instant Messenger 4.x - Remote Buffer Overflow

https://notcve.org/view.php?id=CVE-2002-0005

31 Jan 2002 — Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame). Desbordamiento de buffer en AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, y otras versiones permite a atacantes remotos ejecutar código arbitrario mediante un argumento largo en una petición de juegos (AddGame). • https://www.exploit-db.com/exploits/21196 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2

CVE-2001-1417

https://notcve.org/view.php?id=CVE-2001-1417

06 Oct 2001 — AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data. • http://www.kb.cert.org/vuls/id/710347 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 1

CVE-2001-1421

https://notcve.org/view.php?id=CVE-2001-1421

06 Oct 2001 — AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag. • http://www.kb.cert.org/vuls/id/530299 •