CVE-2002-0785

Published: Aug 12, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.

Affected (14)

Products: Aol: Instant Messenger

Aol

1 product

Instant Messenger

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Aol Instant Messenger	Version 4.0
Aol Instant Messenger	Version 4.1.2010
Aol Instant Messenger	Version 4.1
Aol Instant Messenger	Version 4.2.1193
Aol Instant Messenger	Version 4.2
Aol Instant Messenger	Version 4.3.2229
Aol Instant Messenger	Version 4.3
Aol Instant Messenger	Version 4.4
Aol Instant Messenger	Version 4.5
Aol Instant Messenger	Version 4.6
Aol Instant Messenger	Version 4.7.2480
Aol Instant Messenger	Version 4.7
Aol Instant Messenger	Version 4.8.2616
Aol Instant Messenger	Version 4.8.2646