aol Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for aol software and firmware.

← Back to All Vendors
CVE-2005-1655 UNKNOWN
Component: instant_messenger

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the...

📅 2005-05-18
CVSS 5.0 Dossier →
CVE-2001-1420 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buf...

📅 2005-05-02
CVSS 5.0 Dossier →
CVE-2004-2373 UNKNOWN
Component: instant_messenger

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a sh...

📅 2004-12-31
CVSS 7.5 Dossier →
CVE-2004-0636 UNKNOWN
Component: instant_messenger

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers ...

📅 2004-11-23
CVSS 10.0 Dossier →
CVE-2003-1503 UNKNOWN
Component: instant_messenger

Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen na...

📅 2003-12-31
CVSS 10.0 Dossier →
CVE-2002-2169 UNKNOWN
Component: instant_messenger

Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activ...

📅 2002-12-31
CVSS 5.0 Dossier →
CVE-2002-1953 UNKNOWN
Component: instant_messenger

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of servic...

📅 2002-12-31
CVSS 5.0 Dossier →
CVE-2002-1813 UNKNOWN
Component: instant_messenger

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the prog...

📅 2002-12-31
CVSS 2.6 Dossier →
CVE-2002-0785 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a...

📅 2002-08-12
CVSS 5.0 Dossier →
CVE-2002-0592 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Conn...

📅 2002-06-18
CVSS 7.5 Dossier →
CVE-2002-0591 UNKNOWN
Component: instant_messenger

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute co...

📅 2002-06-18
CVSS 5.0 Dossier →
CVE-2002-0587 UNKNOWN
Component: aol_server

Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote at...

📅 2002-06-18
CVSS 7.5 Dossier →
CVE-2002-0586 UNKNOWN
Component: aol_server

Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allo...

📅 2002-06-18
CVSS 7.5 Dossier →
CVE-2002-0362 UNKNOWN
Component: instant_messenger

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a...

📅 2002-05-29
CVSS 7.5 Dossier →
CVE-2002-1591 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code fr...

📅 2002-04-08
CVSS 7.5 Dossier →
CVE-2002-0100 UNKNOWN
Component: aol_server

AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the fi...

📅 2002-03-25
CVSS 7.5 Dossier →
CVE-2002-0005 UNKNOWN
Component: instant_messenger

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long arg...

📅 2002-01-31
CVSS 10.0 Dossier →
CVE-2001-1421 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different f...

📅 2001-10-06
CVSS 5.0 Dossier →
CVE-2001-1418 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file....

📅 2001-10-06
CVSS 5.0 Dossier →
CVE-2001-1417 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose lengt...

📅 2001-10-06
CVSS 5.0 Dossier →
CVE-2001-1419 UNKNOWN
Component: instant_messenger

AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that ...

📅 2001-10-02
CVSS 5.0 Dossier →
CVE-2001-1067 UNKNOWN
Component: aol_server

Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a...

📅 2001-08-31
CVSS 10.0 Dossier →
CVE-2001-0314 UNKNOWN
Component: aol_server

Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary ...

📅 2001-06-02
CVSS 7.5 Dossier →
CVE-2001-0205 UNKNOWN
Component: aol_server

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested p...

📅 2001-05-03
CVSS 5.0 Dossier →
Page 2 of 3 (54 Total Records)