PT-2002-2316 · Aol+1 · Aol Instant Messenger+1

Published 2002-04-08 · Updated 2008-09-05 · CVE-2002-1591

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 4.7.2480

Description The issue allows code from free.aol.com to bypass intended access restrictions in Internet Explorer, as it adds free.aol.com to the Trusted Sites Zone without user approval.

Recommendations For AOL Instant Messenger (AIM) version 4.7.2480, consider removing free.aol.com from the Trusted Sites Zone in Internet Explorer to prevent unintended access.

Fix

Related Identifiers

CVE-2002-1591

Affected Products

Aol Instant Messenger

Internet Explorer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1591 · Security Note
• http://informationweek.com/story/IWK20010927S0021 · Note
• http://kb.cert.org/vuls/id/744139 · Note
• http://instantmessagingplanet.com/security/article.php/10818_1014151 · Note