← Back

Aol

aol

57 CVEs • 16 products

Products (16)

Click to collapse
Toggle
Instant Messenger
instant_messenger
30 CVEs
Aol Server
aol_server
6 CVEs
Aol Client Software
aol_client_software
5 CVEs
Aol
aol
4 CVEs
Aim
aim
3 CVEs
Icq
icq
2 CVEs
Ygp Screensaver Activex Control
ygp_screensaver_activex_control
1 CVE
Ygp Pic Downloader Activex Control
ygp_pic_downloader_activex_control
1 CVE
Aim Lite
aim_lite
1 CVE
Aim Pro
aim_pro
1 CVE
Radio
radio
1 CVE
Aolmediaplaybackcontrol
aolmediaplaybackcontrol
1 CVE
Ygp Piceditor Activex Control
ygp_piceditor_activex_control
1 CVE
Superbuddy Activex Control
superbuddy_activex_control
1 CVE
Aolserver
aolserver
1 CVE
Dailyfinance Stocks & News
dailyfinance_-_stocks_&_news
1 CVE

CVEs (57)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-1591
1Aol
1Instant Messenger
Apr 16, 2026
Apr 8, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
CVE-2002-0100
1Aol
1Aol Server
Apr 16, 2026
Mar 25, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
CVE-2002-0005
1Aol
1Instant Messenger
Apr 16, 2026
Jan 31, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
CVE-2001-1421
1Aol
1Instant Messenger
Apr 16, 2026
Oct 6, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.
CVE-2001-1418
1Aol
1Instant Messenger
Apr 16, 2026
Oct 6, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.
CVE-2001-1417
1Aol
1Instant Messenger
Apr 16, 2026
Oct 6, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
CVE-2001-1419
2Aol
Cerulean Studios
2Instant Messenger
Trillian
Apr 16, 2026
Oct 2, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
CVE-2001-1067
1Aol
1Aol Server
Apr 16, 2026
Aug 31, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
CVE-2001-0314
1Aol
1Aol Server
Apr 16, 2026
Jun 2, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link.
CVE-2001-0205
1Aol
1Aol Server
Apr 16, 2026
May 3, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
CVE-2001-1416
1Aol
1Instant Messenger
Apr 16, 2026
Jan 18, 2001
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1)...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags.Show less
CVE-2000-1094
1Aol
1Aim
Apr 16, 2026
Jan 9, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
CVE-2000-1093
1Aol
1Instant Messenger
Apr 16, 2026
Jan 9, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
CVE-2000-1000
1Aol
1Instant Messenger
Apr 16, 2026
Dec 11, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format character...Show more
Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.Show less
CVE-2000-0383
1Aol
1Instant Messenger
Apr 16, 2026
May 8, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
CVE-2000-0190
1Aol
1Instant Messenger
Apr 16, 2026
Mar 2, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
CVE-1999-0486
1Aol
1Instant Messenger
Apr 16, 2026
Feb 1, 1998
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.