Show filters
65 Total Results
Displaying 41-50 of 65
Sort by:
Attacker Value
Unknown
CVE-2002-1813
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
0
Attacker Value
Unknown
CVE-2002-1953
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.
0
Attacker Value
Unknown
CVE-2002-0785
Disclosure Date: August 12, 2002 (last updated February 22, 2025)
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
0
Attacker Value
Unknown
CVE-2002-0587
Disclosure Date: June 18, 2002 (last updated February 22, 2025)
Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.
0
Attacker Value
Unknown
CVE-2002-0586
Disclosure Date: June 18, 2002 (last updated February 22, 2025)
Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
0
Attacker Value
Unknown
CVE-2002-0592
Disclosure Date: June 18, 2002 (last updated February 22, 2025)
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
0
Attacker Value
Unknown
CVE-2002-0591
Disclosure Date: June 18, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
0
Attacker Value
Unknown
CVE-2002-0362
Disclosure Date: May 29, 2002 (last updated February 22, 2025)
Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.
0
Attacker Value
Unknown
CVE-2002-1591
Disclosure Date: April 08, 2002 (last updated February 22, 2025)
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
0
Attacker Value
Unknown
CVE-2002-0100
Disclosure Date: March 25, 2002 (last updated February 22, 2025)
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
0
