PT-2006-1590 · America Online · Aol Client

Publicado 2006-02-02 · Atualizado 2018-10-19 · CVE-2006-0526

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions America Online (AOL) client software (affected versions not specified)

Description The default configuration of the America Online (AOL) client software has an issue where all users can modify a certain registry value. This registry value specifies a DLL file name. A local user might be able to gain privileges by using a Trojan horse program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0526

Produtos afetados

Aol Client

Referências · 6

• http://cs.princeton.edu/~sudhakar/papers/winval.pdf · Nota
• http://securityfocus.com/archive/1/423587/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0526 · Nota de Segurança
• http://securityfocus.com/bid/16453 · Nota
• http://kb.cert.org/vuls/id/953860 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24498 · Nota