CVE-2001-1419
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of...
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
Exploit likelihood
What each source reports
NVD Score used
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
- Record
CVE-2001-1419- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
- Record
CVE-2001-1419- Updated
- 2026-11-02
EUVDEUVD-2001-1399 No score
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
- Record
EUVD-2001-1399- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jxh-7h2g-h6mg No score
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of...
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
- Record
GHSA-3jxh-7h2g-h6mg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1419 is a medium vulnerability (CVSS 5.0) in Aol Instant Messenger, published October 2, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.41%, the 84th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/507771
exchange.xforce.ibmcloud.com/vulnerabilities/7233
securityfocus.com/bid/3398
archives.neohapsis.com/archives/bugtraq/2001-10/0014.html
nvd.nist.gov/vuln/detail/CVE-2001-1419
github.com/advisories/GHSA-3jxh-7h2g-h6mg