Home  >  CVE-2001-1417
CVE Details for CVE: CVE-2001-1417
Summary
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
Timestamps
Last major update 11-07-2017 - 01:29
Published 06-10-2001 - 04:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
    cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 3408
bugtraq
  • 20011006 AIM Exploits
  • 20011230 Windows AIM Client Exploits
cert-vn VU#710347
confirm http://www.kb.cert.org/vuls/id/JARL-56TQEN
xf aim-large-buddyicon-dos(7255)