Stack-based Buffer Overflow in AOL CDDBControl ActiveX Control
CVE-2006-6442

Currently unrated

Key Information:

Vendor

Aol

Status
Aol Client Software
Vendor
CVE Published:
10 December 2006

What is CVE-2006-6442?

The CDDBControl ActiveX control, utilized in various versions of America Online, is susceptible to a stack-based buffer overflow due to improper handling of the ClientId argument in the SetClientInfo function. This vulnerability enables remote attackers to execute arbitrary code by providing a specifically crafted long argument. Affected versions include AOL 7.0 4114.563, AOL 8.0 4129.230, and AOL 9.0 Security Edition 4156.910, along with potentially other versions. Users of these products are strongly advised to apply necessary updates or mitigations to safeguard against possible exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.vupen.com/english/advisories/2006/4904
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/21488
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/454105/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

14% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.