CVE-2006-5501

The CVE-2006-5501 entry documents a buffer overflow in AOL.PicDownloadCtrl.1 (YGPPicDownload.dll, v9.2.3.0) used by America Online 9.0 Security Edition. The vulnerability allows remote arbitrary-code execution via the downloadFileDirectory property and is explicitly described as distinct from CVE...

CVE-2006-5502

CVE-2006-5502 refers to a heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 included with AOL 9.0 Security Edition. The vulnerability allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method. Root cause described as a he...