Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AOL Instant Messenger可在目标系统任意建立文件漏洞
Vulnerability Description
AIM是AOL公司开发和维护的即时聊天程序。 AIM在"直接连接"的在线传输文件功能实现上存在漏洞，可导致攻击者存放文件到目标系统任意位置。 AIM在两个用户之间"直接连接"传输文件时(此直接连接功能可以方便地使用户共享多媒体等资源)，发送给用户的图片或者声音文件会包含img标记和data标记，当文件发送后，如果文件类型是RIFF/WAVE类型，接收者一端会使用'SndPlaySoundEx'API函数自动执行文件，当客户端执行文件时，会在Windows临时目录建立文件并从临时目录中执行。 攻击者可以在i
CVSS Information
N/A
Vulnerability Type
N/A