Vulnerability index

Browse CVEs

34 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Dailyfinance Stocks \& News MEDIUM 5.4
CVE-2014-5570

The DailyFinance - Stocks & News (aka com.aol.mobile.dailyFinance) application 2.0.2.1 for Android does not verify X.509 certificates from SSL server…

Mitigation only
Fix from $1,600 2014-09-09
Aim MEDIUM 5.8
CVE-2012-5816

AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam…

No fix yet
Fix from $1,600 2012-11-04
Aolserver MEDIUM 5.0
CVE-2009-4494EPSS 9%

AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title,…

No fix yet
Fix from $1,600 2010-01-13
Superbuddy Activex Control HIGH 8.8
CVE-2009-3658EPSS 9%

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memor…

No fix yet
Fix from $1,950 2009-10-09
Aolmediaplaybackcontrol HIGH 9.3
CVE-2007-6250EPSS 24%

Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow rem…

Mitigation only
Fix from $1,950 2008-01-09
Aim Lite MEDIUM 5.8
CVE-2007-4901

The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain…

Mitigation only
Fix from $1,600 2007-09-14
Instant Messenger HIGH 7.8
CVE-2007-3437

AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application crash) via a malformed header va…

Mitigation only
Fix from $1,950 2007-06-27
Instant Messenger HIGH 7.8
CVE-2007-3350

AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application hang) via a flood of spoofed SIP…

Mitigation only
Fix from $1,950 2007-06-22
Aol HIGH 9.3
CVE-2006-5820EPSS 8%

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function …

Mitigation only
Fix from $1,950 2007-04-02
Aol Client Software HIGH 7.8
CVE-2007-1767

Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service…

Mitigation only
Fix from $1,950 2007-03-30
Aol Client Software HIGH 9.3
CVE-2006-6442EPSS 5%

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America …

Mitigation only
Fix from $1,950 2006-12-10
Icq HIGH 7.5
CVE-2006-5650EPSS 67%

The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the Downlo…

Mitigation only
Fix from $1,950 2006-11-07
Ygp Screensaver Activex Control HIGH 7.5
CVE-2006-3887

Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vector…

Mitigation only
Fix from $1,950 2006-10-10
Ygp Pic Downloader Activex Control HIGH 7.5
CVE-2006-3888EPSS 6%

Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in …

Mitigation only
Fix from $1,950 2006-10-10
Instant Messenger MEDIUM 5.1
CVE-2006-0629

Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a denial of service (client crash) a…

Mitigation only
Fix from $1,600 2006-02-10
Aol Client Software HIGH 7.2
CVE-2006-0526

The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file n…

Mitigation only
Fix from $1,950 2006-02-02
Aol Client Software HIGH 7.2
CVE-2005-2597

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privilege…

Mitigation only
Fix from $1,950 2005-08-17
Instant Messenger MEDIUM 5.0
CVE-2005-1655

AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in th…

No fix yet
Fix from $1,600 2005-05-18
Instant Messenger MEDIUM 5.0
CVE-2001-1420

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a bu…

No fix yet
Fix from $1,600 2005-05-02
Instant Messenger HIGH 7.5
CVE-2004-2373

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a s…

No fix yet
Fix from $1,950 2004-12-31
Instant Messenger MEDIUM 5.0
CVE-2002-1953

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of servi…

No fix yet
Fix from $1,600 2002-12-31
Instant Messenger MEDIUM 5.0
CVE-2002-0785

AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to …

No fix yet
Fix from $1,600 2002-08-12
Instant Messenger HIGH 7.5
CVE-2002-0362

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and …

No fix yet
Fix from $1,950 2002-05-29
Instant Messenger HIGH 7.5
CVE-2002-1591

AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code f…

Mitigation only
Fix from $1,950 2002-04-08
Aol Server HIGH 7.5
CVE-2002-0100

AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the f…

Mitigation only
Fix from $1,950 2002-03-25
Instant Messenger MEDIUM 5.0
CVE-2001-1417

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose leng…

No fix yet
Fix from $1,600 2001-10-06
Instant Messenger MEDIUM 5.0
CVE-2001-1418

AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.

No fix yet
Fix from $1,600 2001-10-06
Instant Messenger MEDIUM 5.0
CVE-2001-1419

AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that…

No fix yet
Fix from $1,600 2001-10-02
Aol Server HIGH 7.5
CVE-2001-0314

Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary…

Mitigation only
Fix from $1,950 2001-06-02
Aol Server MEDIUM 5.0
CVE-2001-0205EPSS 24%

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested …

No fix yet
Fix from $1,600 2001-05-03