Vulnerability in Aol Client Software

CVE-2005-2597

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

Aol Aol_client_software — versions 9.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_NTBUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)