Aol

Aol

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.4

CVE-2010-10015

  • EPSS 0.49%
  • Veröffentlicht 21.08.2025 20:15:30
  • Zuletzt bearbeitet 15.04.2026 00:35:42

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long ...

9.3

CVE-2006-5820

  • EPSS 8.43%
  • Veröffentlicht 02.04.2007 22:19:00
  • Zuletzt bearbeitet 16.06.2026 22:31:56

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

7.5

CVE-2006-5501

  • EPSS 3.4%
  • Veröffentlicht 25.10.2006 22:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:19

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability...

7.5

CVE-2006-5502

  • EPSS 3.4%
  • Veröffentlicht 25.10.2006 22:07:00
  • Zuletzt bearbeitet 16.06.2026 22:31:20

Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerab...

7.2

CVE-2006-0948

  • EPSS 0.36%
  • Veröffentlicht 21.08.2006 18:04:00
  • Zuletzt bearbeitet 16.06.2026 22:21:37

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.