Predictable Location Vulnerability in AOL Instant Messenger (AIM) Buddy Icon File

CVE-2004-2373 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

Learn more about our Web Application Penetration Testing UK.