CVE

Id
19992  
CVE No.
CVE-2006-3888  
Status
Candidate  
Description
Buffer overflow in AOL You"ve Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184485 19992 CVE-2006-3888 IDEFENSE:20061011 AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability  View
184486 19992 CVE-2006-3888 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420  View
184487 19992 CVE-2006-3888 CONFIRM:http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8  View
184488 19992 CVE-2006-3888 CERT-VN:VU#661524  View
184489 19992 CVE-2006-3888 URL:http://www.kb.cert.org/vuls/id/661524  View
184490 19992 CVE-2006-3888 BID:20425  View
184491 19992 CVE-2006-3888 URL:http://www.securityfocus.com/bid/20425  View
184492 19992 CVE-2006-3888 BID:20472  View
184493 19992 CVE-2006-3888 URL:http://www.securityfocus.com/bid/20472  View
184494 19992 CVE-2006-3888 VUPEN:ADV-2006-3967  View
184495 19992 CVE-2006-3888 URL:http://www.vupen.com/english/advisories/2006/3967  View
184496 19992 CVE-2006-3888 SECTRACK:1017024  View
184497 19992 CVE-2006-3888 URL:http://securitytracker.com/id?1017024  View
184498 19992 CVE-2006-3888 SECUNIA:22304  View
184499 19992 CVE-2006-3888 URL:http://secunia.com/advisories/22304  View
184500 19992 CVE-2006-3888 XF:aol-ygp-pic-downloader-bo(29410)  View
184501 19992 CVE-2006-3888 URL:http://xforce.iss.net/xforce/xfdb/29410  View
184502 19992 CVE-2006-3888 XF:aol-ygp-setalbumname-bo(29494)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60659 JVNDB-2006-002925 WinZip などで使用される Sky Software FileView ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 WinZip および特定の他のアプリケーションで使用される Sky Software FileView ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-3890 19992 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002925.html  View