Unscored CVE-2005-2597 EUVD-2005-2598GHSA-jq8w-gqq2-h36f

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM…

Published Aug 17, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.

References

aol-subfolder-weak-security(24324) vdb-entry
20050807 Eh? Oh well....Flaws in AOL software, and accountability. Patch available for one of the two. mailing-list
14530 vdb-entry