CVE-2002-1953

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Affected products

• Instant Messenger (Aol)

References

• http://online.securityfocus.com/archive/1/288980
• http://www.iss.net/security_center/static/9950.php
• http://www.securityfocus.com/bid/5492