Vulnerability · Published Mar 10, 2024 · Assigned by VulDB

CVE-2024-2363AOL AIM Triton Invite denial of service

Medium 5.3

In plain English

A medium-severity security flaw in AIM Triton from AOL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.7%top 45.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic. This vulnerability affects unknown code of the component Invite Handler. The manipulation of the argument CSeq leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256318 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products (as reported)

Vendor	Product	Versions
AOL	AIM Triton	1.0.4

Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

VDB-256318 | AOL AIM Triton Invite denial of service vdb-entry, technical-description
VDB-256318 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
https://fitoxs.com/vuldb/exploit/exploit_aim_triton.txt broken-link, exploit