CVE-2004-2373: Aol Instant Messenger

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.

Affected products

• Aol Instant Messenger: version 4.3 only; version 4.3.2229 only; version 4.4 only; version 4.5 only; version 4.6 only; version 4.7 only; …

Published 2004-12-31. Last modified 2026-06-16.