AOL Instant Messenger (AIM) allows remote attackers to steal files that are being…
Priority LOW 36Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
Why it matters now
EPSS 0.01571 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:aol:instant_messenger:2.0.912:*:*:*:*:*:*:* | 2.0.912 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:2.0.996:*:*:*:*:*:*:* | 2.0.996 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:* | 2.0_n | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:2.1.1236:*:*:*:*:*:*:* | 2.1.1236 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:* | 2.5.1366 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:* | 2.5.1598 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.0.1415:*:*:*:*:*:*:* | 3.0.1415 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:* | 3.0.1470 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:* | 3.0_n | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:* | 3.5.1635 | Vulnerable | AOL |
- cpe:2.3:a:aol:instant_messenger:2.0.912:*:*:*:*:*:*:* Versions 2.0.912 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:2.0.996:*:*:*:*:*:*:* Versions 2.0.996 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:* Versions 2.0_n Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:2.1.1236:*:*:*:*:*:*:* Versions 2.1.1236 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:* Versions 2.5.1366 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:* Versions 2.5.1598 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.0.1415:*:*:*:*:*:*:* Versions 3.0.1415 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:* Versions 3.0.1470 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:* Versions 3.0_n Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:* Versions 3.5.1635 Vulnerable ·AOL
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:* | 3.5.1670 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:* | 3.5.1808 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:* | 3.5.1856 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:* | 4.1.2010 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:* | 4.2.1193 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:* | 4.3.2229 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:* | 4.7 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:* | 4.7.2480 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:* | 4.8.2616 | Vulnerable | AOL |
| cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:* | 4.8.2646 | Vulnerable | AOL |
- cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:* Versions 3.5.1670 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:* Versions 3.5.1808 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:* Versions 3.5.1856 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:* Versions 4.1.2010 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:* Versions 4.2.1193 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:* Versions 4.3.2229 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:* Versions 4.7.2480 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:* Versions 4.8.2616 Vulnerable ·AOL
- cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:* Versions 4.8.2646 Vulnerable ·AOL
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2002-0592
- 2026-10-03 Alias added: GHSA-3c8w-q8xv-2g52
References
—
More AOL Instant Messenger vulnerabilities
- TI-2004-00577 Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant… CVSS 2.0HIGH 10.0
- TI-2002-00005 Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions… CVSS 2.0HIGH 10.0
- TI-2003-01403 Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to… CVSS 2.0HIGH 10.0
- TI-2000-01081 Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to… CVSS 2.0HIGH 7.5
- TI-2002-00350 Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to… CVSS 2.0HIGH 7.5
- TI-2004-02244 The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a… CVSS 2.0HIGH 7.5
Sources
- CVE-2002-0592 · CVE Program
- CVE-2002-0592 · NVD
- FIRST EPSS
- GHSA-3c8w-q8xv-2g52 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences