PT-2002-2316 · Aol+1 · Aol Instant Messenger+1

Publicado 2002-04-08 · Atualizado 2008-09-05 · CVE-2002-1591

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 4.7.2480

Description The issue allows code from free.aol.com to bypass intended access restrictions in Internet Explorer, as it adds free.aol.com to the Trusted Sites Zone without user approval.

Recommendations For AOL Instant Messenger (AIM) version 4.7.2480, consider removing free.aol.com from the Trusted Sites Zone in Internet Explorer to prevent unintended access.

Correção

Identificadores relacionados

CVE-2002-1591

Produtos afetados

Aol Instant Messenger

Internet Explorer

Referências · 4

• http://informationweek.com/story/IWK20010927S0021 · Nota
• http://kb.cert.org/vuls/id/744139 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1591 · Nota de Segurança
• http://instantmessagingplanet.com/security/article.php/10818_1014151 · Nota