CVE-2007-1904 Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .....
MediumCVSS 4.3
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aol icq | <= 5.1 | No fix listed |
| aol instant messenger | <= 5.9.3861 | No fix listed |
References
- 20070409 AOL AIM and ICQ File Transfer Path-Traversal Vulnerability third-party-advisory vendor-advisory
- 24747 third-party-advisory
- 24803 third-party-advisory
- 23391 vdb-entry
- 1017890 vdb-entry
- 1017891 vdb-entry
- ADV-2007-1306 vdb-entry
- ADV-2007-1307 vdb-entry
- aim-icq-filetransfer-directory-traversal(33538) vdb-entry