Heap-based Buffer Overflow in AOL's ActiveX Control
CVE-2006-5502

Currently unrated

Key Information:

Vendor

Aol

Status
Aol
Vendor
CVE Published:
25 October 2006

What is CVE-2006-5502?

The AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) in AOL 9.0 Security Edition is susceptible to a heap-based buffer overflow vulnerability. This security flaw allows remote attackers to execute arbitrary code by leveraging the AddPictureNoAlbum method. This particular exposure is distinct from related issues and can lead to significant security risks if exploited.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/20747
vdb-entryx_refsource_BID
http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE
http://www.vupen.com/english/advisories/2006/4197
vdb-entryx_refsource_VUPEN

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.