CVE-2002-1591: High severity AOL Instant Messenger vulnerability
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1591?
The severity of CVE-2002-1591 is considered to be moderate, as it allows unauthorized access to resources by adding a site to the Trusted Sites Zone without user consent.
How do I fix CVE-2002-1591?
To fix CVE-2002-1591, you should review and remove free.aol.com from the Trusted Sites Zone in Internet Explorer settings.
Which version of AOL Instant Messenger is affected by CVE-2002-1591?
CVE-2002-1591 affects AOL Instant Messenger version 4.7.2480.
What risks does CVE-2002-1591 pose to users?
CVE-2002-1591 allows malicious code from free.aol.com to bypass security restrictions, potentially compromising the user's system.
Is there a workaround for CVE-2002-1591 if I can't update AOL Instant Messenger?
A temporary workaround for CVE-2002-1591 is to manually adjust your Internet Explorer Trusted Sites settings to remove any unwanted sites.