Vulnerabilities

TI-2007-01693 CVE-2007-1767 · GHSA-r674-9g5f-h5vc

Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before…

LOW 37

Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service (browser crash) via unknown vectors.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01683 Published 2007-03-30 No fix listed

TI-2006-06189 CVE-2006-6442 · GHSA-mj38-p228-pv59

Stack-based buffer overflow in the SetClientInfo function in the…

MEDIUM 49

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05656 Published 2006-12-10 No fix listed CWE-119

TI-2006-00511 CVE-2006-0526 · GHSA-557g-4v8f-vprj

The default configuration of the America Online (AOL) client software allows all users to…

LOW 32

The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan hors…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00357 Published 2006-02-02 No fix listed

TI-2006-00306 CVE-2006-0316 · GHSA-fxvh-h253-75g3

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool…

MEDIUM 56

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10481 Published 2006-01-19 No fix listed

TI-2005-02461 CVE-2005-2597 · GHSA-jq8w-gqq2-h36f

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows…