CVE-2006-5501: Buffer Overflow

Published Oct 25, 2006

Updated

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.

Affected Software

1 affected component

AOL AOL=9.0

Remediation

Patch Available

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430

Event History

Oct 25, 2006

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5501?

CVE-2006-5501 has a high severity due to its potential for remote code execution.

How do I fix CVE-2006-5501?

To fix CVE-2006-5501, users should upgrade to a patched version of the AOL software that addresses this vulnerability.

What does CVE-2006-5501 affect?

CVE-2006-5501 affects the AOL 9.0 Security Edition, specifically the AOL.PicDownloadCtrl.1 ActiveX control.

How can attackers exploit CVE-2006-5501?

Attackers can exploit CVE-2006-5501 by using the downloadFileDirectory property to trigger a buffer overflow.

Is CVE-2006-5501 still a threat?

CVE-2006-5501 can still pose a threat if users are running outdated versions of AOL 9.0 Security Edition.