The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition.
AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a buffer overflow in an AOL YPG Picture Finder Tool ActiveX Control. This control is provided by YGPPicFinder.DLL. This vulnerability affects AOL 8.0, 8.0 Plus, and 9.0 Classic. In addition, the vulnerable control was distributed via the You've Got Pictures web site prior to 2004.
A remote attacker may be able to execute arbitrary code or cause a denial-of-service condition.
Upgrading to AOL 9.0 Optimized and AOL 9.0 Security Edition corrects this issue. In addition, AOL has released a hotfix to correct this issue.
This vulnerability was reported by AOL. AOL credits Richard M. Smith for providing information regarding this vulnerability.
|Date First Published:||2006-01-16|
|Date Last Updated:||2006-01-31 15:05 UTC|