PT-2006-6217 · Aol · Aol

Publicado 2006-10-25 · Atualizado 2017-07-20 · CVE-2006-5502

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AOL versions 9.0 Security Edition

Description The issue is a heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control, specifically in the YGPPicDownload.dll version 9.2.3.0. This allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method.

Recommendations For AOL version 9.0 Security Edition, consider disabling the AddPictureNoAlbum method as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2006-5502

Produtos afetados

Aol

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-5502 · Nota de Segurança
• http://securityfocus.com/bid/20747 · Nota
• http://secunia.com/advisories/22567 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429 · Aviso do Fabricante
• http://securitytracker.com/id?1017121 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29795 · Nota
• http://vupen.com/english/advisories/2006/4197 · Nota