Every CVE Search/ Get API key

CVE-2000-1000

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to...

5.0 Medium

CVE-2000-1000 is a medium vulnerability (CVSS 5.0) in Aol Instant Messenger, published December 11, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. No source names a fixed version.

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.

Exploit likelihood

2.21%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.

Record
CVE-2000-1000
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.

Record
CVE-2000-1000
Updated
2026-11-02
EUVDEUVD-2000-0987 No score

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.

Record
EUVD-2000-0987
Updated
2026-11-03
GitHub AdvisoriesGHSA-h2qf-prm2-vch5 No score

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to...

Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.

Record
GHSA-h2qf-prm2-vch5
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open