7.5
CVE-2004-2373
- EPSS 3.06%
- Published 31.12.2004 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
Data is provided by the National Vulnerability Database (NVD)
Aol ≫ Instant Messenger Version4.3
Aol ≫ Instant Messenger Version4.3.2229
Aol ≫ Instant Messenger Version4.4
Aol ≫ Instant Messenger Version4.5
Aol ≫ Instant Messenger Version4.6
Aol ≫ Instant Messenger Version4.7
Aol ≫ Instant Messenger Version4.7.2480
Aol ≫ Instant Messenger Version4.8.2616
Aol ≫ Instant Messenger Version4.8.2646
Aol ≫ Instant Messenger Version4.8.2790
Aol ≫ Instant Messenger Version5.0.2938
Aol ≫ Instant Messenger Version5.1.3036
Aol ≫ Instant Messenger Version5.2.3292
Aol ≫ Instant Messenger Version5.5
Aol ≫ Instant Messenger Version5.5.3415_beta
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.06% | 0.855 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|