If those steps are all of the protocol, this is vulnerable to a man in the middle attack. The way that that is done is by having Eve intercept the public key sent to the sender and instead sends his own. Then the sender sends Eve the AES key and Eve sends the recipient her own AES key accomplishing the man in the middle attack.