Aol

Aol

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.4

CVE-2010-10015

  • EPSS 23.08%
  • Veröffentlicht 21.08.2025 20:15:30
  • Zuletzt bearbeitet 15.04.2026 00:35:42

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long ...

9.3

CVE-2006-5820

  • EPSS 39.12%
  • Veröffentlicht 02.04.2007 22:19:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

7.5

CVE-2006-5501

  • EPSS 5.42%
  • Veröffentlicht 25.10.2006 22:07:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability...

7.5

CVE-2006-5502

  • EPSS 5.42%
  • Veröffentlicht 25.10.2006 22:07:00
  • Zuletzt bearbeitet 23.04.2026 00:35:47

Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerab...

7.2

CVE-2006-0948

  • EPSS 0.03%
  • Veröffentlicht 21.08.2006 18:04:00
  • Zuletzt bearbeitet 16.04.2026 00:27:16

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.