CVSS: 9.1EPSS: 9%CPEs: 9EXPL: 3CVE-2002-0591 – AOL Instant Messenger 4.x - Arbitrary File Creation
https://notcve.org/view.php?id=CVE-2002-0591
11 Jun 2002 — Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename. • https://www.exploit-db.com/exploits/21386 •
CVSS: 7.5EPSS: 0%CPEs: 27EXPL: 0CVE-2002-0592
https://notcve.org/view.php?id=CVE-2002-0592
11 Jun 2002 — AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user. • http://online.securityfocus.com/archive/1/269006 •
CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 1CVE-2002-0362
https://notcve.org/view.php?id=CVE-2002-0362
29 May 2002 — Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711. • http://marc.info/?l=bugtraq&m=102071080509955&w=2 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2002-1591
https://notcve.org/view.php?id=CVE-2002-1591
08 Apr 2002 — AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions. • http://www.informationweek.com/story/IWK20010927S0021 •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2002-0100
https://notcve.org/view.php?id=CVE-2002-0100
15 Mar 2002 — AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file. AOL AOLserver 3.4.2 Win32 permite a atacantes remotos evitar la autenticación y leer ficheros protegidos con contraseña, mediante una dirección URL que referencia directamente el fichero. • http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html •
CVSS: 10.0EPSS: 27%CPEs: 8EXPL: 3CVE-2002-0005 – AOL Instant Messenger 4.x - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2002-0005
31 Jan 2002 — Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame). Desbordamiento de buffer en AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, y otras versiones permite a atacantes remotos ejecutar código arbitrario mediante un argumento largo en una petición de juegos (AddGame). • https://www.exploit-db.com/exploits/21196 •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2CVE-2001-1417
https://notcve.org/view.php?id=CVE-2001-1417
06 Oct 2001 — AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data. • http://www.kb.cert.org/vuls/id/710347 •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 1CVE-2001-1421
https://notcve.org/view.php?id=CVE-2001-1421
06 Oct 2001 — AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag. • http://www.kb.cert.org/vuls/id/530299 •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 1CVE-2001-1418
https://notcve.org/view.php?id=CVE-2001-1418
06 Oct 2001 — AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file. • http://www.kb.cert.org/vuls/id/990451 •
CVSS: 7.5EPSS: 7%CPEs: 11EXPL: 3CVE-2001-1419
https://notcve.org/view.php?id=CVE-2001-1419
02 Oct 2001 — AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0014.html •