What is CVE-2004-0636?

CVE-2004-0636 is a vulnerability in N/a. Published 2004-08-12.

Is CVE-2004-0636 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2004-0636

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

EPSS: 0.804 (99.2th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

VU#735966 (x_refsource_CERT-VN, third-party-advisory)
aim-away-bo(16926) (vdb-entry, x_refsource_XF)
12198 (x_refsource_SECUNIA, third-party-advisory)
www.idefense.com/application/poi/display (x_refsource_MISC)

Frequently asked questions

What is CVE-2004-0636?: CVE-2004-0636 is a vulnerability in N/a. Published 2004-08-12.
Is CVE-2004-0636 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.