iDefense Security Advisory 10.25.06: AOL YGPPDownload AddPictureNoAlbum ActiveX Control Heap Corruption Vulnerability

AOL YGPPDownload AddPictureNoAlbum ActiveX Control Heap Corruption Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND America Online 9.0 Security Edition builds upon Internet Explorer technology to offer its users...

iDefense Security Advisory 10.25.06: AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerability

AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerability iDefense Security Advisory 10.25.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 25, 2006 I. BACKGROUND America Online 9.0 Security Edition builds upon Internet Explorer technology to offer its users...

AOL YGPPDownload ActiveX buffer overflow

Buffer overflow in SetAlbumName method of YGPPicDownload.dll AOL.PicDownloadCtrl.1...

CVE-2006-3888

The CVE-2006-3888 issue affects AOL You’ve Got Pictures (YGP) Pic Downloader ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll) used in AOL 9.0 Security Edition. A buffer overflow allows remote attackers to execute arbitrary code via a long argument to SetAlbumName. The vulnerability is ...