Approved changes feed: RSS · Atom

cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

VendorAol (10d5b003-67b5-5c5d-ad77-b012d557140a)
ProductInstant Messenger (69b91a4d-9600-5375-bb8e-9d72d62dfe0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-1655 vulnerable 2026-06-08 04:48:27.147064 Details available
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
Published: 2005-05-18T04:00:00.000Z
Updated: 2024-09-16T23:06:54.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2373 vulnerable 2026-06-08 04:48:09.439408 Details available
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2169 vulnerable 2026-06-08 04:47:19.261903 Details available
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-09-16T17:53:57.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1953 vulnerable 2026-06-08 04:47:18.578678 Details available
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-17T04:19:17.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0785 vulnerable 2026-06-08 04:46:22.244842 Details available
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:03:48.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0592 vulnerable 2026-06-08 04:46:21.780083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0591 vulnerable 2026-06-08 04:46:21.768658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0005 vulnerable 2026-06-08 04:46:20.380002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1419 vulnerable 2026-06-08 04:46:19.857746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.