CVE-2002-1813: Low severity aol instant messenger vulnerability
Published Dec 31, 2002
·Updated
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
Affected Software
4 affected components
AOL Instant Messenger=4.7.2480
AOL Instant Messenger=4.8.2616
AOL Instant Messenger=4.8.2646
AOL Instant Messenger=5.0.2938
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jun 28, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1813?
CVE-2002-1813 is classified as a medium severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2002-1813?
To mitigate CVE-2002-1813, users should upgrade to a non-vulnerable version of AOL Instant Messenger, specifically versions higher than 5.0.2938.
3
Who is affected by CVE-2002-1813?
CVE-2002-1813 affects users of AOL Instant Messenger versions 4.7.2480 and 4.8.x up to 5.0.2938.
4
What type of attack does CVE-2002-1813 enable?
CVE-2002-1813 enables remote attackers to execute arbitrary programs on the victim's system.
5
When was CVE-2002-1813 reported?
CVE-2002-1813 was reported in October 2002.