PT-2006-1590 · America Online · Aol Client

Published 2006-02-02 · Updated 2018-10-19 · CVE-2006-0526

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions America Online (AOL) client software (affected versions not specified)

Description The default configuration of the America Online (AOL) client software has an issue where all users can modify a certain registry value. This registry value specifies a DLL file name. A local user might be able to gain privileges by using a Trojan horse program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0526

Affected Products

Aol Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0526 · Security Note
• http://cs.princeton.edu/~sudhakar/papers/winval.pdf · Note
• http://securityfocus.com/archive/1/423587/100/0/threaded · Note
• http://securityfocus.com/bid/16453 · Note
• http://kb.cert.org/vuls/id/953860 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24498 · Note