GCVE - cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Aol (`10d5b003-67b5-5c5d-ad77-b012d557140a`)
Product	Instant Messenger (`69b91a4d-9600-5375-bb8e-9d72d62dfe0e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2404`	not_vulnerable	2026-06-03 14:29:40.853369	Details available Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function. Published: 2009-08-03T14:00:00.000Z Updated: 2024-08-07T05:52:14.939Z Open on db.gcve.eu Reference links http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf http://secunia.com/advisories/36139 http://secunia.com/advisories/36102 http://secunia.com/advisories/36157 http://www.us-cert.gov/cas/techalerts/TA10-103B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5124`	vulnerable	2026-06-03 14:28:20.153390	Details available The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zone lockdown. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4901. Published: 2007-09-27T19:00:00.000Z Updated: 2024-08-07T15:17:28.336Z Open on db.gcve.eu Reference links http://aviv.raffon.net/2007/09/25/ReadyAIMFire.aspx http://www.securityfocus.com/archive/1/480647/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1904`	vulnerable	2026-06-03 14:28:07.060370	Details available Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation. Published: 2007-04-10T23:00:00.000Z Updated: 2024-08-07T13:13:41.832Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1017890 https://exchange.xforce.ibmcloud.com/vulnerabilities/33538 http://www.vupen.com/english/advisories/2007/1307 http://www.securitytracker.com/id?1017891 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=508	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1421`	vulnerable	2026-06-03 14:26:12.481876	Details available AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag. Published: 2005-03-20T05:00:00.000Z Updated: 2024-08-08T04:58:11.401Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/JARL-569MD7 http://www.securityfocus.com/bid/3756 http://www.securityfocus.com/archive/1/218920 https://exchange.xforce.ibmcloud.com/vulnerabilities/7757 http://www.kb.cert.org/vuls/id/530299	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0190`	vulnerable	2026-06-03 14:25:42.777658	Details available AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value. Published: 2000-03-22T05:00:00.000Z Updated: 2024-08-08T05:05:54.105Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.