CVE-2002-0591

None

CVSS

—

EPSS

11.6%

Published

Jun 18, 2002

CISA due date

—

The record

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.

Affected packages

Ecosystem	Package	Introduced	Fixed