CVE-2002-0591: Aol Instant Messenger

Medium severity, CVSS 5.0. EPSS: 11.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.

Affected products

• Aol Instant Messenger: version 4.0 only; version 4.1 only; version 4.2 only; version 4.3 only; version 4.4 only; version 4.5 only; …

Published 2002-06-18. Last modified 2026-06-16.