Remote Code Execution in AOL Instant Messenger Web Control
CVE-2007-4901

Currently unrated

Key Information:

Vendor: Aol
Status: Aim Lite; Aim Pro; Instant Messenger
Vendor: CVE Published:; 14 September 2007

What is CVE-2007-4901?

The AOL Instant Messenger's embedded Internet Explorer server control is vulnerable due to improper constraints on the use of mshtml.dll for incoming instant messages. This flaw permits remote attackers to manipulate HTML within notification windows, enabling code execution or the display of unauthorized content, such as local image files, in unexpected contexts. Users of AIM versions 6.1.41.2, 6.2.32.1, AIM Pro, and AIM Lite are particularly at risk, as attackers can exploit this weakness to perform malicious actions without user consent.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch