CVEvulnerability

CVE-2004-0636

10.0 HIGH Published 2004-11-23 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-11-23
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

Affected configurations

• aol instant messenger 5.5 • aol instant messenger 5.5.3415 beta • aol instant messenger 5.5.3595

References

http://secunia.com/advisories/12198/ Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/735966 US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16926 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/12198/ Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/735966 US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16926 exchange.xforce.ibmcloud.com