CVE-2011-10027: AOL Desktop 9.6 RTX Stack-Based Buffer Overflow
AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to execute arbitrary code when a victim opens a malicious .rtx file. AOL Desktop is end-of-life and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-10027?
CVE-2011-10027 has been classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2011-10027?
To fix CVE-2011-10027, update to the latest version of AOL Desktop that addresses this buffer overflow vulnerability.
What component of AOL Desktop is affected by CVE-2011-10027?
CVE-2011-10027 affects the Tool\rich.rct component of AOL Desktop.
What type of attack can CVE-2011-10027 facilitate?
CVE-2011-10027 can facilitate a remote code execution attack via a crafted .rtx file.
Which versions of AOL Desktop are vulnerable to CVE-2011-10027?
AOL Desktop versions prior to the patch that fixes CVE-2011-10027 are vulnerable to this issue.