CVE-2002-2169

CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...