CVE:CVE-2004-2373
CNNVD:CNNVD-200412-592
AOL Instant Messenger (AIM) 4.3至5.5版本的Buddy icon文件创建于预定位置。远程攻击者可以使用shell: URI来利用其他包含预定位置的漏洞。
solution:Upgrade aol instant_messenger to a higher version than 4.3,4.3.2229,4.4,4.5,4.6,4.7,4.7.2480,4.8.2616,4.8.2646,4.8.2790,5.0.2938,5.1.3036,5.2.3292,5.5,5.5.3415_beta,and avoid the version 4.3,4.3.2229,4.4,4.5,4.6,4.7,4.7.2480,4.8.2616,4.8.2646,4.8.2790,5.0.2938,5.1.3036,5.2.3292,5.5,5.5.3415_beta