Security Advisory

CVE-2007-5124

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-09-27 19:00:00

Last updated 2024-08-07 15:17:28

Assigner mitre

State PUBLISHED

Description

The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIMs filtering of "specific tags and attributes" and the lack of Local Machine Zone lockdown. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4901.

← Browse all CVEs View on cve.org ↗