CVE-2004-0636: Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, i...

Security readout for executives and security teams

CVE-2004-0636 is an old AOL Instant Messenger flaw where a specially long Away message sent through the aim:goaway URI handler could overflow memory and run code on a victim system. Exposure is likely limited to legacy systems that still have AOL Instant Messenger 5.5 installed or retain the aim: URI handler registration. Treat as a legacy hygiene issue with high impact if present. It should not outrank current internet-facing vulnerabilities unless AIM 5.5 is found in production or high-risk user environments. Mitigation focus: Inventory endpoints for AOL Instant Messenger 5.5 installations.; Remove unsupported AIM clients where business use no longer exists.; Check whether aim: URI handlers remain registered on managed systems..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.