CVE-2000-1094: Buffer Overflow
First published: Tue Jan 09 2001(Updated: )
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AOL Instant Messenger | =4.0 | |
| AOL Instant Messenger | =3.5.1856 | |
| AOL Instant Messenger | =3.0_n | |
| AOL Instant Messenger | =4.1.2010 | |
| AOL Instant Messenger | =3.5.1635 | |
| AOL Instant Messenger | =2.0_n | |
| AOL Instant Messenger | =2.5.1598 | |
| AOL Instant Messenger | =3.0.1470 | |
| AOL Instant Messenger | =3.5.1808 | |
| AOL Instant Messenger | =4.2.1193 | |
| AOL Instant Messenger | =3.5.1670 | |
| AOL Instant Messenger | =2.5.1366 | |
| AOL Instant Messenger Lite | <4.3.2229 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2000-1094?
CVE-2000-1094 has a severity rating of medium due to its potential to allow remote code execution.
How do I fix CVE-2000-1094?
To fix CVE-2000-1094, upgrade AOL Instant Messenger to version 4.3.2229 or later.
What systems are affected by CVE-2000-1094?
CVE-2000-1094 affects various versions of AOL Instant Messenger up to 4.2.1193.
What type of vulnerability is CVE-2000-1094?
CVE-2000-1094 is a buffer overflow vulnerability that can be exploited via specially crafted commands.
Can CVE-2000-1094 be exploited remotely?
Yes, CVE-2000-1094 can be exploited remotely by attackers through the buddyicon command.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/event
- agent/description
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/aol
- canonical/aol instant messenger
- version/aol instant messenger/4.0
- version/aol instant messenger/3.5.1856
- version/aol instant messenger/3.0_n
- version/aol instant messenger/4.1.2010
- version/aol instant messenger/3.5.1635
- version/aol instant messenger/2.0_n
- version/aol instant messenger/2.5.1598
- version/aol instant messenger/3.0.1470
- version/aol instant messenger/3.5.1808
- version/aol instant messenger/4.2.1193
- version/aol instant messenger/3.5.1670
- version/aol instant messenger/2.5.1366
- canonical/aol instant messenger lite