10
CVSSv2

CVE-2002-0005

Published: 31/01/2002 Updated: 10/10/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote malicious users to execute arbitrary code via a long argument in a game request (AddGame).

Vulnerable Product Search on Vulmon Subscribe to Product

aol instant messenger 4.5

aol instant messenger 4.6

aol instant messenger 4.3.2229

aol instant messenger 4.4

aol instant messenger 4.7

aol instant messenger 4.7.2480

aol instant messenger 4.3

aol instant messenger 4.8.2616

Exploits

source: wwwsecurityfocuscom/bid/3769/info AOL Instant Messenger (AIM) is a real time messaging service The vulnerability exists in the way that AIM parses a game request with a TLV (type, length, value) type of 0x2711 This type of game request is prone to a buffer overflow which could allow a remote user to obtain the same privileges o ...