CVE-2010-10015: Stack-based Buffer Overflow

AOL versions up to and including 9.5 includes an ActiveX control Phobos.dll that exposes a method called Import via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attacke...

AOL Phobos.Playlist ActiveX Control Stack Buffer Overflow

A buffer overflow vulnerability exists in AOL 9.5. The vulnerability is due to a boundary error when handling a certain function call with an overly long value. Remote attackers can exploit this vulnerability by enticing a target user to open a specially crafted web page with an embedded code tha...