Back to CVE Browser

CVE-2003-1503

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0720%

EPSS Percentile10.89th

PublishedDec 31, 2003

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.

Affected Platforms (CPE)

📦

Aol

Instant Messenger

= 5.2.3292

References & Advisories

🔗 http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0059.html

🔗 http://www.digitalpranksters.com/advisories/aol/AIMProtocolBO.html

🔗 http://www.securityfocus.com/bid/8825

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13443

🔗 http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0059.html

🔗 http://www.digitalpranksters.com/advisories/aol/AIMProtocolBO.html

🔗 http://www.securityfocus.com/bid/8825

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13443

Related Vulnerabilities

CVE-2004-063610.0

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allo...

CVE-2002-000510.0

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary...

CVE-2007-38329.3

Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attacker...

CVE-2009-24049.3

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Fir...