CVE-2007-1904

MEDIO 4.3CVE-2007-1904 · Published 10/04/2007 · updated 16/06/2026

In breve

CVE-2007-1904 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda icq (aol), instant messenger (aol).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
icq aol	`≤ 5.1`	No fix yet
instant messenger aol	`≤ 5.9.3861`	No fix yet

Description

Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Vendor Advisory
secunia.com/advisories/24747
secunia.com/advisories/24803
securityfocus.com/bid/23391
securitytracker.com/id
securitytracker.com/id
vupen.com/english/advisories/2007/1306
vupen.com/english/advisories/2007/1307
exchange.xforce.ibmcloud.com/vulnerabilities/33538

Altre vulnerabilità di icq

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free