AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)

AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...

CVE-2007-5755

CVE-2007-5755 : Multiple stack-based buffer overflows in AOL Radio’s AmpX ActiveX control (AmpX.dll 2.6.1.11) allow remote attackers to execute arbitrary code via long arguments to unspecified methods. Root cause: boundary/size handling with unsafe strcpy() copying attacker-supplied data into fix...

iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities

iDefense Security Advisory 11.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 09, 2007 I. BACKGROUND America Online's AmpX is an ActiveX control associated with AOL Radio. It is typically used for embedding streaming audio content in web pages. For more information visit the...