CVE-2000-1094

Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.

Affected products

Aol Instant Messenger

Aol Aim

< 4.3.2229

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

4.7% (91th percentile)

Weakness

CWE-120

NVD status

Modified

Published

2001-01-22