Lucene search
HistoryFeb 02, 2006 - 11:02 a.m.
CVE-2006-0526
america online
aol
client software
registry
dll
local users
privilege escalation
trojan horse
cve-2006-0526
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
21.7%
The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.
Affected configurations
Node
aolaol_client_softwareMatch8.0
ORaolaol_client_softwareMatch8.0plus
ORaolaol_client_softwareMatch9.0
ORaolaol_client_softwareMatch9.0optimized
ORaolaol_client_softwareMatch9.0security
| CPE | Name | Operator | Version |
|---|---|---|---|
| aol:aol_client_software | aol aol client software | eq | 8.0 |
| aol:aol_client_software | aol aol client software | eq | 9.0 |
Related
prion
prion
Default configuration
2006-02-02 11:02:00
nvd
nvd
CVE-2006-0526
2006-02-02 11:02:00
cvelist
cvelist
CVE-2006-0526
2006-02-02 11:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
21.7%
Related for CVE-2006-0526