CVE-2004-0636 Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
HighCVSS 10.0
EPSS 66.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aol instant messenger | = 5.5 | No fix listed |
| aol instant messenger | = 5.5.3415_beta | No fix listed |
| aol instant messenger | = 5.5.3595 | No fix listed |
References
- 12198 patch third-party-advisory vendor-advisory
- www.idefense.com patch vendor-advisory
- VU#735966 third-party-advisory us-government-resource
- aim-away-bo(16926) vdb-entry