CVE-2005-2597: Aol Client Software

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.

Affected products

• Aol Aol Client Software: version 9.0 only

Published 2005-08-17. Last modified 2026-06-16.