KLA10047 ACE vulnerability in AOL AIM

Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message.

Original advisories

vulnerability description

Related products

AOL-Instant-Messenger-(AIM)

CVE list

CVE-2007-5124 high

Solution

Update to latest version

AIM

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• AOL Instant Messenger versions 6.5.3.12 and earlier