Show filters
65 Total Results
Displaying 21-30 of 65
Sort by:
Attacker Value
Unknown
CVE-2006-5820
Disclosure Date: April 02, 2007 (last updated October 04, 2023)
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.
0
Attacker Value
Unknown
CVE-2007-1767
Disclosure Date: March 30, 2007 (last updated October 04, 2023)
Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service (browser crash) via unknown vectors.
0
Attacker Value
Unknown
CVE-2006-6442
Disclosure Date: December 10, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.
0
Attacker Value
Unknown
CVE-2006-5650
Disclosure Date: November 07, 2006 (last updated October 04, 2023)
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.
0
Attacker Value
Unknown
CVE-2006-5502
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501.
0
Attacker Value
Unknown
CVE-2006-5501
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.
0
Attacker Value
Unknown
CVE-2006-3888
Disclosure Date: October 10, 2006 (last updated October 04, 2023)
Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.
0
Attacker Value
Unknown
CVE-2006-3887
Disclosure Date: October 10, 2006 (last updated October 04, 2023)
Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-0948
Disclosure Date: August 21, 2006 (last updated October 04, 2023)
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.
0
Attacker Value
Unknown
CVE-2006-0629
Disclosure Date: February 10, 2006 (last updated February 22, 2025)
Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a denial of service (client crash) and possibly execute arbitrary code by tricking the user into requesting Buddy Info about a long screen name, which might cause a buffer overflow.
0
