CVE-2004-2373

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

Affected (15)

Products: Aol: Instant Messenger

Aol

1 product

Instant Messenger

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Aol Instant Messenger	Version 4.3.2229
Aol Instant Messenger	Version 4.3
Aol Instant Messenger	Version 4.4
Aol Instant Messenger	Version 4.5
Aol Instant Messenger	Version 4.6
Aol Instant Messenger	Version 4.7.2480
Aol Instant Messenger	Version 4.7
Aol Instant Messenger	Version 4.8.2616
Aol Instant Messenger	Version 4.8.2646
Aol Instant Messenger	Version 4.8.2790
Aol Instant Messenger	Version 5.0.2938
Aol Instant Messenger	Version 5.1.3036
Aol Instant Messenger	Version 5.2.3292
Aol Instant Messenger	Version 5.5.3415_beta
Aol Instant Messenger	Version 5.5