Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5314
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0987