Lucene search

[email protected]CVE-2004-2373

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2373

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2373

aol instant messenger

aim

predictable location

remote attackers

shell uri

vulnerability

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.069 Low

EPSS

Percentile

93.8%

JSON

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

CPENameOperatorVersion
aol:instant_messengeraol instant messengereq5.0.2938
aol:instant_messengeraol instant messengereq4.8.2646
aol:instant_messengeraol instant messengereq4.5
aol:instant_messengeraol instant messengereq4.3
aol:instant_messengeraol instant messengereq4.6
aol:instant_messengeraol instant messengereq5.5
aol:instant_messengeraol instant messengereq4.3.2229
aol:instant_messengeraol instant messengereq4.8.2616
aol:instant_messengeraol instant messengereq5.1.3036
aol:instant_messengeraol instant messengereq4.7

CPE	Name	Operator	Version
aol:instant_messenger	aol instant messenger	eq	5.0.2938
aol:instant_messenger	aol instant messenger	eq	4.8.2646
aol:instant_messenger	aol instant messenger	eq	4.5
aol:instant_messenger	aol instant messenger	eq	4.3
aol:instant_messenger	aol instant messenger	eq	4.6
aol:instant_messenger	aol instant messenger	eq	5.5
aol:instant_messenger	aol instant messenger	eq	4.3.2229
aol:instant_messenger	aol instant messenger	eq	4.8.2616
aol:instant_messenger	aol instant messenger	eq	5.1.3036
aol:instant_messenger	aol instant messenger	eq	4.7

Rows per page:

1-10 of 151

References

www.securityfocus.com/archive/1/354448

www.securityfocus.com/bid/9698

exchange.xforce.ibmcloud.com/vulnerabilities/15310

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.069 Low

EPSS

Percentile

93.8%

JSON