CVE-2002-0005

Опубликовано: 31 янв. 2002

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).

Ссылки

http://marc.info/?l=ntbugtraq&m=100998295512885&w=2
http://www.kb.cert.org/vuls/id/907819
US Government Resource
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/247944
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3769
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7743
http://marc.info/?l=ntbugtraq&m=100998295512885&w=2
http://www.kb.cert.org/vuls/id/907819
US Government Resource
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/247944
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3769
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7743

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*

cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2793

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4f5r-74rh-r693

github

больше 3 лет назад