Read the docs
TI-2011-04630 Aliases CVE-2011-10027GHSA-49qg-jhw7-fj9x

AOL Desktop 9.6 RTX Stack-Based Buffer Overflow

Priority HIGH 72CWE-121Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to execute arbitrary code when a victim opens a malicious .rtx file. AOL Desktop is end-of-life and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00585 48th percentileScored 2026-11-07
Public exploit Yes 4 exploit referencesTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AOLAOL Desktopup to 9.6—No fix listedCNA
  • AOL Desktop VendorAOL Affected up to 9.6 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-10027
  2. 2026-10-03 Alias added: GHSA-49qg-jhw7-fj9x

References

Exploit 4

Advisory 1

  • TI-2004-00577 Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant… CVSS 2.0HIGH 10.0
  • TI-2010-05051 AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow CVSS 4.0HIGH 8.4
  • TI-2006-05454 The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote… CVSS 2.0HIGH 7.5
  • TI-2007-05963 Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe)… CVSS 2.0HIGH 9.3
  • TI-2002-00005 Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions… CVSS 2.0HIGH 10.0
  • TI-2001-01022 Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service… CVSS 2.0HIGH 10.0
See all 59 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences