PT-2001-2510 · Aol · Aol Instant Messenger

Publicado 2001-01-18 · Atualizado 2008-09-05 · CVE-2001-1416

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 4.4

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in log messages within certain Alpha versions of the software. These vulnerabilities allow remote attackers to execute arbitrary web script or HTML via images in the DATA, STYLE, or BINARY tags.

Recommendations For AOL Instant Messenger (AIM) version 4.4, update to a version that addresses these XSS vulnerabilities to prevent remote attackers from executing arbitrary web scripts.

Correção

Identificadores relacionados

CVE-2001-1416

Produtos afetados

Aol Instant Messenger

Referências · 4

• http://windowsitpro.com/Articles/Index.cfm?ArticleID=19811&DisplayTab=Article · Nota
• http://kb.cert.org/vuls/id/JARL-56TPBQ · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1416 · Nota de Segurança
• http://kb.cert.org/vuls/id/541384 · Nota