Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Max CVSS
10.0
EPSS Score
2.16%
Published
2001-08-31
Updated
2017-10-10
Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
Max CVSS
10.0
EPSS Score
15.45%
Published
2002-01-31
Updated
2017-10-10
Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.
Max CVSS
10.0
EPSS Score
5.22%
Published
2003-12-31
Updated
2017-07-29

CVE-2004-0636

Public exploit
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
Max CVSS
10.0
EPSS Score
91.90%
Published
2004-11-23
Updated
2017-07-11
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors.
Max CVSS
10.0
EPSS Score
33.13%
Published
2006-01-19
Updated
2017-07-20
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.
Max CVSS
9.3
EPSS Score
59.67%
Published
2007-04-02
Updated
2018-10-17
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.
Max CVSS
9.3
EPSS Score
11.39%
Published
2006-12-10
Updated
2018-10-17
Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods.
Max CVSS
9.3
EPSS Score
38.72%
Published
2007-11-14
Updated
2017-07-29
Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method.
Max CVSS
9.3
EPSS Score
60.04%
Published
2008-01-09
Updated
2017-08-08
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method.
Max CVSS
9.3
EPSS Score
9.49%
Published
2009-10-09
Updated
2024-02-03
Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service (browser crash) via unknown vectors.
Max CVSS
7.8
EPSS Score
1.52%
Published
2007-03-30
Updated
2017-07-29
AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application hang) via a flood of spoofed SIP INVITE requests.
Max CVSS
7.8
EPSS Score
1.07%
Published
2007-06-22
Updated
2017-07-29
AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application crash) via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350.
Max CVSS
7.8
EPSS Score
0.95%
Published
2007-06-27
Updated
2017-07-29
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
Max CVSS
7.5
EPSS Score
0.42%
Published
2001-01-09
Updated
2017-07-11
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
Max CVSS
7.5
EPSS Score
0.74%
Published
2001-01-09
Updated
2024-02-09
Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link.
Max CVSS
7.5
EPSS Score
0.55%
Published
2001-06-02
Updated
2017-12-19
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
Max CVSS
7.5
EPSS Score
0.64%
Published
2002-03-25
Updated
2016-10-18
Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.
Max CVSS
7.5
EPSS Score
2.91%
Published
2002-05-29
Updated
2016-10-18
Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
Max CVSS
7.5
EPSS Score
1.79%
Published
2002-06-18
Updated
2008-09-05
Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.
Max CVSS
7.5
EPSS Score
3.72%
Published
2002-06-18
Updated
2008-09-05
AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
Max CVSS
7.5
EPSS Score
1.00%
Published
2002-06-18
Updated
2017-07-11
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
Max CVSS
7.5
EPSS Score
0.32%
Published
2002-04-08
Updated
2008-09-05
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Max CVSS
7.5
EPSS Score
6.86%
Published
2004-12-31
Updated
2017-07-11
The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer underflow in a loop counter variable.
Max CVSS
7.5
EPSS Score
0.51%
Published
2005-06-09
Updated
2024-02-08
Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors.
Max CVSS
7.5
EPSS Score
11.73%
Published
2006-10-10
Updated
2017-07-20
57 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!