CVE-2002-2169: Medium severity AOL Instant Messenger vulnerability

Published Dec 31, 2002

Updated

Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.

Affected Software

3 affected components

AOL Instant Messenger=4.5

AOL Instant Messenger=4.7

AOL Instant Messenger=4.7.2480

Remediation

Patch Available

http://www.securityfocus.com/bid/5246

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Nov 16, 2005

CVE Published

via MITRE·09:17 PM

Data Sourced

via MITRE·09:17 PM

Description

Frequently Asked Questions

What is the severity of CVE-2002-2169?

CVE-2002-2169 is classified as a moderate severity vulnerability that exposes users to cross-site scripting attacks.

How do I fix CVE-2002-2169?

To fix CVE-2002-2169, users should upgrade AOL Instant Messenger to a version that does not have this vulnerability.

What software versions are affected by CVE-2002-2169?

CVE-2002-2169 affects AOL Instant Messenger versions 4.5 and 4.7 for both MacOS and Windows.

What kind of attacks can CVE-2002-2169 facilitate?

CVE-2002-2169 can facilitate attacks that allow unauthorized actions such as manipulating a user's buddy list.

Is CVE-2002-2169 still a relevant threat today?

While CVE-2002-2169 is an older vulnerability, it highlights the importance of securing legacy software that may still be in use.