Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1953
buffer overflow
aol instant messenger
aim
denial of service
nvd
cve-2002-1953
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects “Get Info” on the buddy.
Affected configurations
Node
aolinstant_messengerMatch4.4
ORaolinstant_messengerMatch4.5
ORaolinstant_messengerMatch4.6
ORaolinstant_messengerMatch4.7
ORaolinstant_messengerMatch4.7.2480
ORaolinstant_messengerMatch4.8.2616
ORaolinstant_messengerMatch4.8.2646
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2002-1953