Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-1953
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.2%
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects “Get Info” on the buddy.
Affected configurations
Node
aolinstant_messengerMatch4.4
ORaolinstant_messengerMatch4.5
ORaolinstant_messengerMatch4.6
ORaolinstant_messengerMatch4.7
ORaolinstant_messengerMatch4.7.2480
ORaolinstant_messengerMatch4.8.2616
ORaolinstant_messengerMatch4.8.2646
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.2%
Related for NVD:CVE-2002-1953