Skip to content
OpenAdvisories

Vendor

AOL

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.4
    CVE-2010-10015 Public exploit

    AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow

    AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string ar…

  • High 8.4
    CVE-2011-10027 Public exploit

    AOL Desktop 9.6 RTX Stack-Based Buffer Overflow

    AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy opera…