CVE-2006-5820

The AOL SuperBuddy ActiveX control (Sb.SuperBuddy.1) contains a vulnerability in the LinkSBIcons() method. This flaw occurs because the method fails to properly validate a user-controlled address argument before dereferencing it, which can allow a remote, unauthenticated attacker to overwrite arb...

CVE-2006-5820: Undefined Security Weakness

The LinkSBIcons method in the SuperBuddy ActiveX control Sb.SuperBuddy.1 in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value...

CVE-2006-5502: Undefined Security Weakness

Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control YGPPicDownload.dll 9.2.3.0 in America Online AOL 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501...

CVE-2006-5501: Undefined Security Weakness

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control YGPPicDownload.dll 9.2.3.0 in America Online AOL 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502...

CVE-2006-3888: Undefined Security Weakness

Buffer overflow in AOL You've Got Pictures YGP Pic Downloader YGPPDownload ActiveX control AOL.PicDownloadCtrl.1, YGPPicDownload.dll, as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method...

CVE-2006-0948

CVE-2006-0948 concerns AOL 9.0 Security Edition revision 4184.2340 (and potentially other versions) where the installer/directory permissions grant Everyone Full Control on the America Online 9.0 directory, enabling local users to replace or manipulate critical files. Root cause is insecure defau...

CVE-2006-0948: Undefined Security Weakness

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...