ID CVE-2002-0005
Summary Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
References
Vulnerable Configurations
  • cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*
  • cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 10-10-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 3769
bugtraq
  • 20020102 AIM addendum
  • 20020102 w00w00 on AOL Instant Messenger (serious vulnerability)
cert-vn VU#907819
ntbugtraq
  • 20020102 AIM addendum
  • 20020102 w00w00 on AOL Instant Messenger (serious vulnerability)
xf aim-game-overflow(7743)
Last major update 10-10-2017 - 01:30
Published 31-01-2002 - 05:00
Last modified 10-10-2017 - 01:30
Back to Top