CVE-1999-0486: Medium severity AOL Instant Messenger vulnerability
Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
AOL Instant Messengerfrom your environment.Uninstall or disable AOL Instant Messenger if it is not required as a temporary mitigation until an official patch or update is provided.
- Configuration
Disable automatic parsing, previewing, or opening of hyperlinks in AOL Instant Messenger to prevent a received malicious link from triggering a crash.
AOL Instant Messenger automatic hyperlink handling = disabled - Compensating control
Deploy content filtering at the network or messaging gateway to block or strip hyperlinks from incoming AIM messages, and restrict AIM/IM traffic to trusted networks and contacts until a vendor fix is available.
- Operational
Advise users not to click links received via AOL Instant Messenger, and report any application crashes or suspicious messages to IT for investigation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0486?
CVE-1999-0486 has a severe impact as it leads to a denial of service, potentially crashing the client system.
How do I fix CVE-1999-0486?
To fix CVE-1999-0486, you should update AOL Instant Messenger to the latest available version that addresses this vulnerability.
What types of attacks are associated with CVE-1999-0486?
CVE-1999-0486 is associated with denial of service attacks through malicious hyperlinks sent to AOL Instant Messenger clients.
Who is affected by CVE-1999-0486?
Users of AOL Instant Messenger version 3.5 are primarily affected by CVE-1999-0486.
Can CVE-1999-0486 be exploited remotely?
Yes, CVE-1999-0486 can be exploited remotely by sending malicious hyperlinks to users of the affected messaging software.