CVE-2005-2597: High severity AOL AOL Client Software vulnerability
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2597?
CVE-2005-2597 is rated as a high-severity vulnerability due to the potential for local users to execute arbitrary code with SYSTEM privileges.
How do I fix CVE-2005-2597?
To fix CVE-2005-2597, ensure that the installation path of AOL Client Software 9.0 has secure permissions and restrict access to the executable file.
Who is affected by CVE-2005-2597?
CVE-2005-2597 affects users of AOL Client Software version 9.0 who have local access to the machine.
What type of attack does CVE-2005-2597 enable?
CVE-2005-2597 enables local users to perform code execution attacks by replacing a critical executable with a malicious program.
What is the impact of CVE-2005-2597?
The impact of CVE-2005-2597 includes the potential compromise of system integrity and confidentiality due to unauthorized code execution.