Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

aol instant messenger 4.7 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2002-0005
Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote malicious users to execute arbitrary code via a long argument in a game request (AddGame).
Aol Instant Messenger 4.5Aol Instant Messenger 4.6Aol Instant Messenger 4.3.2229Aol Instant Messenger 4.4Aol Instant Messenger 4.7Aol Instant Messenger 4.7.2480Aol Instant Messenger 4.3Aol Instant Messenger 4.8.2616
7.5
CVSSv2
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 up to and including 5.5 is created in a predictable location, which may allow remote malicious users to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Aol Instant Messenger 4.8.2616Aol Instant Messenger 4.8.2646Aol Instant Messenger 4.7Aol Instant Messenger 4.7.2480Aol Instant Messenger 5.5Aol Instant Messenger 5.5.3415 BetaAol Instant Messenger 4.4Aol Instant Messenger 4.5Aol Instant Messenger 4.6Aol Instant Messenger 5.1.3036Aol Instant Messenger 5.2.3292Aol Instant Messenger 4.3Aol Instant Messenger 4.3.2229Aol Instant Messenger 4.8.2790Aol Instant Messenger 5.0.2938
7.5
CVSSv2
CVE-2002-0592
AOL Instant Messenger (AIM) allows remote malicious users to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
Aol Instant Messenger 3.0.1415Aol Instant Messenger 3.0.1470Aol Instant Messenger 4.1Aol Instant Messenger 4.1.2010Aol Instant Messenger 2.0.912Aol Instant Messenger 3.0 NAol Instant Messenger 3.5.1635Aol Instant Messenger 4.2Aol Instant Messenger 4.2.1193Aol Instant Messenger 4.7.2480Aol Instant Messenger 4.8.2616Aol Instant Messenger 4.8.2646Aol Instant Messenger 4.6Aol Instant Messenger 4.7Aol Instant Messenger 2.5.1366Aol Instant Messenger 2.5.1598Aol Instant Messenger 3.5.1856Aol Instant Messenger 4.0Aol Instant Messenger 4.4Aol Instant Messenger 4.5Aol Instant Messenger 2.0.996Aol Instant Messenger 2.0 N
5
CVSSv2
CVE-2005-1655
AOL Instant Messenger 5.5.x and previous versions allows remote malicious users to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
Aol Instant Messenger 2.0.912Aol Instant Messenger 2.5.1598Aol Instant Messenger 3.0.1470Aol Instant Messenger 4.1Aol Instant Messenger 4.2Aol Instant Messenger 4.7Aol Instant Messenger 4.8.2616Aol Instant Messenger 5.2.3292Aol Instant Messenger 5.5.3415 BetaAol Instant Messenger 2.0.996Aol Instant Messenger 2.0 NAol Instant Messenger 2.1.1236Aol Instant Messenger 2.5.1366Aol Instant Messenger 4.3Aol Instant Messenger 4.3.2229Aol Instant Messenger 4.4Aol Instant Messenger 4.5Aol Instant Messenger 5.9.3702Aol Instant Messenger 1.2Aol Instant Messenger 3.0.1415Aol Instant Messenger 3.0 NAol Instant Messenger 4.0
5
CVSSv2
CVE-2001-1420
AOL Instant Messenger (AIM) 4.7 allows remote malicious users to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.
Aol Instant Messenger 4.7
5
CVSSv2
CVE-2002-2169
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote malicious users to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" t...
Aol Instant Messenger 4.7Aol Instant Messenger 4.5Aol Instant Messenger 4.7.2480
5
CVSSv2
CVE-2002-1953
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 up to and including 4.8.2616 allows remote malicious users to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get...
Aol Instant Messenger 4.8.2646Aol Instant Messenger 4.4Aol Instant Messenger 4.5Aol Instant Messenger 4.6Aol Instant Messenger 4.7.2480Aol Instant Messenger 4.7Aol Instant Messenger 4.8.2616
5
CVSSv2
CVE-2002-0785
AOL Instant Messenger (AIM) allows remote malicious users to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
Aol Instant Messenger 4.1Aol Instant Messenger 4.1.2010Aol Instant Messenger 4.2Aol Instant Messenger 4.2.1193Aol Instant Messenger 4.0Aol Instant Messenger 4.3Aol Instant Messenger 4.4Aol Instant Messenger 4.6Aol Instant Messenger 4.7Aol Instant Messenger 4.7.2480Aol Instant Messenger 4.8.2616Aol Instant Messenger 4.3.2229Aol Instant Messenger 4.5Aol Instant Messenger 4.8.2646
5
CVSSv2
CVE-2002-0591
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and previous versions allows remote malicious users to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
Aol Instant Messenger 4.1Aol Instant Messenger 4.6Aol Instant Messenger 4.8 BetaAol Instant Messenger 4.2Aol Instant Messenger 4.3Aol Instant Messenger 4.4Aol Instant Messenger 4.5Aol Instant Messenger 4.0Aol Instant Messenger 4.7
5
CVSSv2
CVE-2001-1421
AOL Instant Messenger (AIM) 4.7 and previous versions allows remote malicious users to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.
Aol Instant Messenger
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook