CVE-2004-0636: Aol Instant Messenger

High severity, CVSS 10.0. EPSS: 66% chance of exploitation in the next 30 days.

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

Affected products

• Aol Instant Messenger: version 5.5 only; version 5.5.3415_beta only; version 5.5.3595 only

Published 2004-11-23. Last modified 2026-06-16.