CVE-2007-5124
Last modified
CVE-2007-5124 is a vulnerability of currently unknown severity. The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zone lockdown. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4901.. EPSS estimates a 1.90% chance of exploitation in the next 30 days.
Description
The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zone lockdown. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4901.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Aol | Instant Messenger | <= 6.5.3.12 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-5124?
How severe is CVE-2007-5124?
How do I fix CVE-2007-5124?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-5118Unspecified vulnerability in the HID (Human Interface Device…
- CVE-2007-5119JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to …
- CVE-2007-5120Multiple cross-site scripting (XSS) vulnerabilities in JSPWi…
- CVE-2007-5121Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-…
- CVE-2007-5122SQL injection vulnerability in store_info.php in SoftBiz Cla…
- CVE-2007-5123SQL injection vulnerability in notas.asp in Novus 1.0 allows…
- CVE-2007-5125Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2007-5126Unspecified vulnerability in the client in Symantec Veritas …
- CVE-2007-5127Multiple cross-site scripting (XSS) vulnerabilities in SimpG…
- CVE-2007-5128SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, …
- CVE-2007-5129SimpGB 1.46.02 stores sensitive information under the web ro…
- CVE-2007-5130SimpGB 1.46.02 allows remote attackers to obtain sensitive i…
Are you affected by CVE-2007-5124?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST