Approved changes feed: RSS · Atom

cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*

part: a version: 4.7.2480 update: *

VendorAol (10d5b003-67b5-5c5d-ad77-b012d557140a)
ProductInstant Messenger (69b91a4d-9600-5375-bb8e-9d72d62dfe0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-1655 vulnerable 2026-06-08 04:48:27.148727 Details available
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag.
Published: 2005-05-18T04:00:00.000Z
Updated: 2024-09-16T23:06:54.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2373 vulnerable 2026-06-08 04:48:09.441159 Details available
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:13.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2169 vulnerable 2026-06-08 04:47:19.261944 Details available
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-09-16T17:53:57.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1953 vulnerable 2026-06-08 04:47:18.579843 Details available
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-17T04:19:17.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1813 vulnerable 2026-06-08 04:47:18.230813 Details available
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-17T00:36:58.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1591 vulnerable 2026-06-08 04:46:24.093366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0785 vulnerable 2026-06-08 04:46:22.244896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0592 vulnerable 2026-06-08 04:46:21.780136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0005 vulnerable 2026-06-08 04:46:20.380066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1419 vulnerable 2026-06-08 04:46:19.859434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.