CVE-2001-1419: Aol Instant Messenger

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.

Affected products

• Aol Instant Messenger: version 4.0 only; version 4.1 only; version 4.2 only; version 4.3 only; version 4.3.2229 only; version 4.4 only; …
• Cerulean Studios Trillian: version 0.6351 only

Published 2001-10-02. Last modified 2026-06-16.