PT-2003-2448 · Aol · Aol Instant Messenger

Published 2003-12-31 · Updated 2024-02-14 · CVE-2003-1503

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AOL Instant Messenger (AIM) version 5.2.3292

Description The issue allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. This is a result of a buffer overflow.

Recommendations For AOL Instant Messenger (AIM) version 5.2.3292, update to a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2003-1503

Affected Products

Aol Instant Messenger

References · 5

• http://securityfocus.com/bid/8825 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1503 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13443 · Note
• http://digitalpranksters.com/advisories/aol/AIMProtocolBO.html · Note
• http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0059.html · Note