CVE-2004-2373 The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that inv...
HighCVSS 7.5
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aol instant messenger | = 4.3 | No fix listed |
| aol instant messenger | = 4.3.2229 | No fix listed |
| aol instant messenger | = 4.4 | No fix listed |
| aol instant messenger | = 4.5 | No fix listed |
| aol instant messenger | = 4.6 | No fix listed |
| aol instant messenger | = 4.7 | No fix listed |
| aol instant messenger | = 4.7.2480 | No fix listed |
| aol instant messenger | = 4.8.2616 | No fix listed |
| aol instant messenger | = 4.8.2646 | No fix listed |
| aol instant messenger | = 4.8.2790 | No fix listed |
| aol instant messenger | = 5.0.2938 | No fix listed |
| aol instant messenger | = 5.1.3036 | No fix listed |
| aol instant messenger | = 5.2.3292 | No fix listed |
| aol instant messenger | = 5.5 | No fix listed |
| aol instant messenger | = 5.5.3415_beta | No fix listed |
References
- 20040219 Aol Instant Messenger/Microsoft Internet Explorer remote code execution mailing-list vendor-advisory
- 9698 exploit vdb-entry
- aim-buddy-predictable-location(15310) vdb-entry