GCVE-110-CERTCC-2001-541384

Advisory Published

Vulnetix · Advisory published January 24, 2001

Certain Alpha versions of AOL Instant Messenger (AIM), that were leaked, would log errors to a log file. By sending a crafted image file, it may be possible to execute arbitrary script/HTML on a victims browser when they view the log files.

Download JSON Open in Console

Risk Scores

certcc-cam

impact7population5exploitation0widely_known20score_current0.65625ease_of_exploitation2

References

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

url

AOL Instant Messenger saves code embedded in image tag to conversation log which could be viewed/executed by a browser

advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON