medium5.0Public exploit code
CVE-2002-2169
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, su…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOL Instant Messenger 4.x - Unauthorized Actions2002-07-16 · remote · windows · Verified
Impact
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Instant Messenger | Versions 4.5, 4.7, 4.7.2480 |