CVE-2004-0636

Name: CVE-2004-0636
Creator: NVD / NIST
Published: 2004-11-23T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 66.02%

Last modified Jun 16, 2026

CVE-2004-0636 is a vulnerability of currently unknown severity. Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.. EPSS estimates a 66.02% chance of exploitation in the next 30 days.

Description

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

Metrics

EPSS Probability

66.02%

99.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Aol	Instant Messenger	5.5
Aol	Instant Messenger	5.5.3415_beta
Aol	Instant Messenger	5.5.3595

References

http://secunia.com/advisories/12198/Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=121&type=vulnerabilitiesPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/735966US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16926
http://secunia.com/advisories/12198/Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=121&type=vulnerabilitiesPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/735966US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16926

Timeline

Published: Nov 23, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-0636?

How severe is CVE-2004-0636?

Severity scoring for CVE-2004-0636 is pending analysis. The EPSS model estimates a 66.02% probability of exploitation in the next 30 days.

How do I fix CVE-2004-0636?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0636?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST