CVE-2006-3888 - Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method

Back Back to CVE browser

HIGH

Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method

Published Oct 10, 2006

7.5

HIGH

CVSS 2.0

EPSS 6.01%

Description

Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (11)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420
third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/22304
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017024
vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/661524
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8
x_refsource_CONFIRM
http://www.securityfocus.com/bid/20425
vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/20472
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3967
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3882
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29410
vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/29494
vdb-entryx_refsource_XF

Link	Providers	Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420		third-party-advisoryx_refsource_IDEFENSE
http://secunia.com/advisories/22304		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017024		vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/661524		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8		x_refsource_CONFIRM
http://www.securityfocus.com/bid/20425		vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/20472		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3967		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3882		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29410		vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/29494		vdb-entryx_refsource_XF