CVE-2006-5502: Buffer Overflow

Published Oct 25, 2006

Updated

Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501.

Affected Software

1 affected component

AOL AOL=9.0

Remediation

Patch Available

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429

Event History

Oct 25, 2006

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5502?

CVE-2006-5502 is considered to be of high severity due to the potential for remote code execution.

How do I fix CVE-2006-5502?

To fix CVE-2006-5502, it is recommended to update AOL to the latest version that addresses this vulnerability.

Which software is affected by CVE-2006-5502?

CVE-2006-5502 affects America Online (AOL) 9.0 Security Edition.

Can CVE-2006-5502 be exploited remotely?

Yes, CVE-2006-5502 can be exploited remotely through malicious use of the AddPictureNoAlbum method.

What is the impact of CVE-2006-5502?

The impact of CVE-2006-5502 includes the possibility for attackers to execute arbitrary code on the affected system.