Vulnerability Details : CVE-2004-0636
Public exploit exists!
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
Vulnerability category: OverflowExecute code
Products affected by CVE-2004-0636
- cpe:2.3:a:aol:instant_messenger:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:aol:instant_messenger:5.5.3415_beta:*:*:*:*:*:*:*
- cpe:2.3:a:aol:instant_messenger:5.5.3595:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-0636
92.95%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2004-0636
-
AOL Instant Messenger goaway Overflow
Disclosure Date: 2004-08-09First seen: 2020-04-26exploit/windows/browser/aim_goawayThis module exploits a flaw in the handling of AOL Instant Messenger's 'goaway' URI handler. An attacker can execute arbitrary code by supplying an overly sized buffer as the 'message' parameter. This issue is known to affect AOL Instant Messenger 5.5.
CVSS scores for CVE-2004-0636
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2004-0636
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/16926
-
http://www.kb.cert.org/vuls/id/735966
US Government Resource
-
http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities
Accenture acquires iDefense | AccenturePatch;Vendor Advisory
Jump to