Security Advisory

CVE-2002-2169

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-16 21:17:00
Last updated 2024-09-16 17:53:57
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.