Sploitus

18 exploited vulnerabilities in Aol Instant Messenger

Vulnerabilities with publicly known exploits

Vendors
Aol
With known exploits
18
Affected Aol Instant Messenger versions
= 5.5, 5.5.3415_beta, 5.5.3595, 4.3, 4.3.2229, 4.4, 4.5, 4.6, 4.7, 4.7.2480, 4.8.2616, 4.8.2646, 4.8.2790, 5.0.2938, 5.1.3036, 5.2.3292, 2.0_n, 2.5.1366, 2.5.1598, 3.0.1470, 3.0_n, 3.5.1635, 3.5.1670, 3.5.1808, 3.5.1856, 4.0, 4.1.2010, 4.2.1193, 1.2, 2.0.912, 2.0.996, 2.1.1236, 3.0.1415, 4.1, 4.2, 5.9.3702, 4.8_beta
Affected Aol Aim versions
< 4.3.2229

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2004-0636 14 exploits
CVSS 10.0 HIGH 2004-08-12
AOL Instant Messenger AIM "Away" Message Remote ExploitAOL Instant Messenger AIM "Away" Message Local Exploit
CVE-2002-0005 1 exploit
CVSS 10.0 HIGH 2002-01-31FIX AVAILABLE
AOL Instant Messenger 4.x - Remote Buffer Overflow
CVE-2004-2373 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
CVE-2002-0362
CVSS 7.5 HIGH 2002-05-29FIX AVAILABLE
CVE-2000-1094 1 exploit
CVSS 7.5 HIGH 2001-01-09FIX AVAILABLE
AOL Instant Messenger 4.0/4.1.2010/4.2.1193 - BuddyIcon Buffer Overflow
CVE-2000-1093 1 exploit
CVSS 7.5 HIGH 2001-01-09FIX AVAILABLE
AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Remote Buffer Overflow
CVE-2012-5816
CVSS 5.8 MEDIUM 2012-11-04FIX AVAILABLE
CVE-2005-1655 1 exploit
CVSS 5.0 MEDIUM 2005-05-18
AOL Instant Messenger 4.x/5.x - Smiley Icon Location Remote Denial of Service
CVE-2001-1420
CVSS 5.0 MEDIUM 2005-03-20FIX AVAILABLE
CVE-2002-2169 1 exploit
CVSS 5.0 MEDIUM 2002-12-31FIX AVAILABLE
AOL Instant Messenger 4.x - Unauthorized Actions
CVE-2002-1953
CVSS 5.0 MEDIUM 2002-12-31FIX AVAILABLE
CVE-2002-0785
CVSS 5.0 MEDIUM 2002-08-12
CVE-2002-0591 1 exploit
CVSS 5.0 MEDIUM 2002-06-11FIX AVAILABLE
AOL Instant Messenger 4.x - Arbitrary File Creation
CVE-2001-1421
CVSS 5.0 MEDIUM 2001-10-06FIX AVAILABLE
CVE-2001-1419
CVSS 5.0 MEDIUM 2001-10-02FIX AVAILABLE
CVE-2001-1418
CVSS 5.0 MEDIUM 2001-10-06FIX AVAILABLE
CVE-2001-1417
CVSS 5.0 MEDIUM 2001-10-06FIX AVAILABLE
CVE-2002-1813 1 exploit
CVSS 2.6 LOW 2002-12-31FIX AVAILABLE
AOL Instant Messenger 4.8.2790 - Local File Execution