CVE:CVE-2002-2169
CNNVD:CNNVD-200212-379
MacOS和Windows平台下的AOL Instant Messenger (AIM) 4.5和4.7版本存在跨站脚本攻击（XSS）漏洞。远程攻击者可以借助带有aim:URL的META HTTP-EQUIV=“refresh”标签的URL进行未授权活动，如在用户好友列表中添加好友和群组。
solution:Upgrade aol instant_messenger to a higher version than 4.5,4.7,4.7.2480,and avoid the version 4.5,4.7,4.7.2480