high7.5Public exploit code
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location2004-02-19 · remote · windows · Verified
Impact
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Instant Messenger | Versions 4.3, 4.3.2229, 4.4, 4.5, 4.6, 4.7 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/354448
- http://www.securityfocus.com/bid/9698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15310
- http://www.securityfocus.com/archive/1/354448
- http://www.securityfocus.com/bid/9698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15310