Overview
The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition.
Description
AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a buffer overflow in an AOL YPG Picture Finder Tool ActiveX Control. This control is provided by YGPPicFinder.DLL. This vulnerability affects AOL 8.0, 8.0 Plus, and 9.0 Classic. In addition, the vulnerable control was distributed via the You've Got Pictures web site prior to 2004. |
Impact
A remote attacker may be able to execute arbitrary code or cause a denial-of-service condition. |
Solution
Upgrade Upgrading to AOL 9.0 Optimized and AOL 9.0 Security Edition corrects this issue. In addition, AOL has released a hotfix to correct this issue. |
Vendor Information
CVSS Metrics
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
References
Acknowledgements
This vulnerability was reported by AOL. AOL credits Richard M. Smith for providing information regarding this vulnerability.
This document was written by Jeff Gennari.
Other Information
CVE IDs: | None |
Severity Metric: | 1.59 |
Date Public: | 2006-01-16 |
Date First Published: | 2006-01-16 |
Date Last Updated: | 2006-01-31 15:05 UTC |
Document Revision: | 56 |