Vulnerabilities

TI-2012-04857 CVE-2012-5816 · GHSA-pggj-h2hx-qrp8

AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a…

LOW 27

AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attack…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0057 Published 2012-11-04 No fix listed CWE-20

TI-2005-01792 CVE-2005-1891 · GHSA-wx39-gwc4-8cjf

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows…

LOW 37

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counte…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02287 Published 2005-06-08 No fix listed CWE-191

TI-2000-01082 CVE-2000-1094 · GHSA-gj55-f7mm-vjjc

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to…

MEDIUM 40

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04683 Published 2001-01-22 No fix listed CWE-120

Vulnerabilities

Filters

AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a…

The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows…

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to…