CVE-2002-0591

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.8_beta:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-06-18 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2002-0591

Mitre link : CVE-2002-0591

CVE.ORG link : CVE-2002-0591


JSON object : View

Products Affected

aol

  • instant_messenger