CVE-2002-0591

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-06-18 · updated 2026-06-16

Description

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.

Affected products

AOL Instant Messenger: 4.0, 4.1, 4.2, 4.3, 4.4, 4.5 (+3)

References

http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html
http://www.iss.net/security_center/static/8870.php
http://www.securityfocus.com/bid/4526
http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html
http://www.iss.net/security_center/static/8870.php
http://www.securityfocus.com/bid/4526

Get alerted when CVE-2002-0591 or the next vulnerability affects your stack