Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 up to and including 5.5 is created in a predictable location, which may allow remote malicious users to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
aol instant messenger 4.8.2616
aol instant messenger 4.8.2646
aol instant messenger 4.7
aol instant messenger 4.7.2480
aol instant messenger 5.5
aol instant messenger 5.5.3415_beta
aol instant messenger 4.4
aol instant messenger 4.5
aol instant messenger 4.6
aol instant messenger 5.1.3036
aol instant messenger 5.2.3292
aol instant messenger 4.3
aol instant messenger 4.3.2229
aol instant messenger 4.8.2790
aol instant messenger 5.0.2938

source: wwwsecurityfocuscom/bid/9698/info It has been reported that AOL Instant Messenger stores imported Buddy Icons in a predictable location on client systems that may allow an attacker to facilitate further attacks which could eventually lead to execution of arbitrary code This issue has been tested on AOL Instant Messenger versions ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/354448 http://www.securityfocus.com/bid/9698 https://exchange.xforce.ibmcloud.com/vulnerabilities/15310 https://nvd.nist.gov https://www.exploit-db.com/exploits/23730/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2373

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect