CVEvulnerability
CVE-2006-3888
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.
Affected configurations
• aol ygp pic downloader activex control
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420 labs.idefense.com
- http://secunia.com/advisories/22304 secunia.com
- http://securitytracker.com/id?1017024 securitytracker.com
- http://www.kb.cert.org/vuls/id/661524 US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8 www.kb.cert.org
- http://www.securityfocus.com/bid/20425 www.securityfocus.com
- http://www.securityfocus.com/bid/20472 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3967 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29410 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29494 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420 labs.idefense.com
- http://secunia.com/advisories/22304 secunia.com
- http://securitytracker.com/id?1017024 securitytracker.com
- http://www.kb.cert.org/vuls/id/661524 US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8 www.kb.cert.org
- http://www.securityfocus.com/bid/20425 www.securityfocus.com
- http://www.securityfocus.com/bid/20472 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3967 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29410 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29494 exchange.xforce.ibmcloud.com