Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2006-5820
Disclosure Date: April 02, 2007 (last updated October 04, 2023)
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.
0
Attacker Value
Unknown
CVE-2007-1767
Disclosure Date: March 30, 2007 (last updated October 04, 2023)
Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service (browser crash) via unknown vectors.
0
Attacker Value
Unknown
CVE-2006-6442
Disclosure Date: December 10, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.
0
Attacker Value
Unknown
CVE-2006-5502
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501.
0
Attacker Value
Unknown
CVE-2006-5501
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.
0
Attacker Value
Unknown
CVE-2006-0948
Disclosure Date: August 21, 2006 (last updated October 04, 2023)
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.
0
Attacker Value
Unknown
CVE-2006-0526
Disclosure Date: February 02, 2006 (last updated February 22, 2025)
The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.
0
Attacker Value
Unknown
CVE-2006-0316
Disclosure Date: January 19, 2006 (last updated February 22, 2025)
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2005-2597
Disclosure Date: August 17, 2005 (last updated February 22, 2025)
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.
0
