CVE-2002-1953: Aol Instant Messenger

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy.

Affected products

• Aol Instant Messenger: version 4.4 only; version 4.5 only; version 4.6 only; version 4.7 only; version 4.7.2480 only; version 4.8.2616 only; …

Published 2002-12-31. Last modified 2026-06-16.