CVE-2002-0591

Published: Jun 18, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.

Affected (9)

Products: Aol: Instant Messenger

Aol

1 product

Instant Messenger

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Aol Instant Messenger	Version 4.0
Aol Instant Messenger	Version 4.1
Aol Instant Messenger	Version 4.2
Aol Instant Messenger	Version 4.3
Aol Instant Messenger	Version 4.4
Aol Instant Messenger	Version 4.5
Aol Instant Messenger	Version 4.6
Aol Instant Messenger	Version 4.7
Aol Instant Messenger	Version 4.8_beta