CVEvulnerability
CVE-2006-6442
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.
Affected configurations
• aol aol client software 7.0 4114.563
• aol aol client software 8.0 4129.230
• aol aol client software 9.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://attrition.org/pipermail/vim/2006-December/001173.html attrition.org
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051230.html lists.grok.org.uk
- http://secunia.com/advisories/23043 Vendor Advisory
- http://secunia.com/secunia_research/2006-69/advisory/ Vendor Advisory
- http://securitytracker.com/id?1017357 securitytracker.com
- http://www.securityfocus.com/archive/1/454105/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21488 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4904 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30790 exchange.xforce.ibmcloud.com
- http://attrition.org/pipermail/vim/2006-December/001173.html attrition.org
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051230.html lists.grok.org.uk
- http://secunia.com/advisories/23043 Vendor Advisory
- http://secunia.com/secunia_research/2006-69/advisory/ Vendor Advisory
- http://securitytracker.com/id?1017357 securitytracker.com
- http://www.securityfocus.com/archive/1/454105/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21488 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4904 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30790 exchange.xforce.ibmcloud.com