CVE-2002-0005

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-01-31 · updated 2026-06-16

Description

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).

Affected products

AOL Instant Messenger: 4.3, 4.3.2229, 4.4, 4.5, 4.6, 4.7 (+2)

References

http://marc.info/?l=ntbugtraq&m=100998295512885&w=2
http://www.kb.cert.org/vuls/id/907819
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72
http://www.securityfocus.com/archive/1/247944
http://www.securityfocus.com/bid/3769
https://exchange.xforce.ibmcloud.com/vulnerabilities/7743
http://marc.info/?l=ntbugtraq&m=100998295512885&w=2
http://www.kb.cert.org/vuls/id/907819
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72
http://www.securityfocus.com/archive/1/247944

Get alerted when CVE-2002-0005 or the next vulnerability affects your stack