{"uuid": "9b0e049c-3bb5-47bd-a095-bf6efb9db422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0636", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/aim_goaway.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"skape \", \"thief \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a flaw in the handling of AOL Instant\\n          Messenger's 'goaway' URI handler.  An attacker can execute\\n          arbitrary code by supplying an overly sized buffer as the\\n          'message' parameter.  This issue is known to affect AOL Instant\\n          Messenger 5.5.\", \"disclosure_date\": \"2004-08-09\", \"fullname\": \"exploit/windows/browser/aim_goaway\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"AOL Instant Messenger goaway Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/aim_goaway.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/browser/aim_goaway\", \"references\": [\"CVE-2004-0636\", \"OSVDB-8398\", \"BID-10889\", \"URL-http://www.idefense.com/application/poi/display?id=121&amp;type=vulnerabilities\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows NT/2000/XP/2003 Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:59.041046Z"}