573 matches found
CVE-2006-0316
CVE-2006-0316 describes a buffer overflow in the YGPPicFinder.DLL ActiveX control used by AOL’s You’ve Got Pictures (YGP) Picture Finder Tool (bundled with AOL 8.0/8.0 Plus/9.0 Classic). The vulnerability allows a remote target to potentially execute arbitrary code via unspecified vectors, as rep...
CVE-2006-0316
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...
AOL You've Got Pictures ActiveX Control (YGPPicFinder.DLL) Overflow
The remote host contains an ActiveX control from AOL called YPG Picture Finder Tool. It was distributed along with various versions of AOL's client software and from the You've Got Pictures website prior to 2004. The 'YGPPicFinder.DLL' component of this control fails to limit the amount of...
AOL buffer overflow
Buffer overflow in You've Got Pictures ActiveX Control...
[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow
TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...
AOL You've Got Pictures ActiveX control buffer overflow
Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...
CVE-2002-2169
CVE-2002-2169 affects AOL Instant Messenger (AIM) 4.5 and 4.7 on MacOS and Windows. A crafted URL containing a META HTTP-EQUIV="refresh" tag to an aim: URL triggers cross-site scripting, enabling remote attackers to perform unauthorized actions such as adding buddies and groups to a user’s buddy ...
AOLserver Default Password
The remote web server is running AOL web server AOLserver with the default username and password set. An attacker may use this to gain control of the remote web server. OpenVAS Vulnerability Test $Id: aolserverdefaultpassword.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: AOLserver Default...
AOL Instant Messenger is Installed
The remote host is using AOL Instant Messenger AIM. AIM has been associated with multiple security vulnerabilities in the past. This software is not suitable for a business environment. OpenVAS Vulnerability Test $Id: aolinstalled.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: AOL Instant...
AOL Journals BlogID敏感信息泄露漏洞
AOL Journals是一款美国在线的BLOG系统 AOL Journals的Atom/RSS feed选项存在问题，远程攻击者可以利用这个漏洞获得用户帐户及相关EMAIL地址信息。 AOL Journals包含一个连接允许用户获得Atom或者RSS Feed，其中包含用户feed的全部路径，攻击者可以通过连接，增加 BlogID号码，短时间获得大量用户的EMAIL帐户信息 AOL Journals 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://journals.aol.com/...
CVE-2005-2597
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program...
CVE-2005-2597
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program...
CVE-2005-2597
CVE-2005-2597 concerns AOL Client Software 9.0, where insecure permissions on the installation path allow a local user to replace ACSD.exe with a malicious program, enabling arbitrary code execution with SYSTEM privileges. The vulnerability is local in scope and hinges on insufficient protection ...
CVE-2004-2373
Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...
CVE-2002-1953
Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...
CVE-2002-1953
The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...
CVE-2002-1813
Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...
CVE-2002-1743
Technical details about CVE-2002-1743 are not provided in the supplied documents. No concrete information on affected components or impact is available here; monitor for updates.