Vulnerabilities > CVE-2007-1904 - Directory Traversal vulnerability in AOL ICQ and Instant Messenger

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
aol
NVD
Published: 2007-04-10
Updated: 2017-07-29

Summary

Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation.

Vulnerable Configurations

Part Description Count
Application
Aol
2

References