CVE-2002-0592: Aol Instant Messenger

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.

Affected products

• Aol Instant Messenger: version 2.0.912 only; version 2.0.996 only; version 2.0_n only; version 2.1.1236 only; version 2.5.1366 only; version 2.5.1598 only; …

Published 2002-06-18. Last modified 2026-06-16.