Lucene search

[email protected]CVE-2002-1953

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1953

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

buffer overflow

aol instant messenger

aim

denial of service

nvd

cve-2002-1953

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects “Get Info” on the buddy.

CPENameOperatorVersion
aol:instant_messengeraol instant messengereq4.8.2646
aol:instant_messengeraol instant messengereq4.5
aol:instant_messengeraol instant messengereq4.6
aol:instant_messengeraol instant messengereq4.8.2616
aol:instant_messengeraol instant messengereq4.7
aol:instant_messengeraol instant messengereq4.7.2480
aol:instant_messengeraol instant messengereq4.4

CPE	Name	Operator	Version
aol:instant_messenger	aol instant messenger	eq	4.8.2646
aol:instant_messenger	aol instant messenger	eq	4.5
aol:instant_messenger	aol instant messenger	eq	4.6
aol:instant_messenger	aol instant messenger	eq	4.8.2616
aol:instant_messenger	aol instant messenger	eq	4.7
aol:instant_messenger	aol instant messenger	eq	4.7.2480
aol:instant_messenger	aol instant messenger	eq	4.4

References

online.securityfocus.com/archive/1/288980

www.iss.net/security_center/static/9950.php

www.securityfocus.com/bid/5492

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Related for CVE-2002-1953

cvelist1