Vendor
AOL
3 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 8.4CVE-2010-10015 Public exploit
AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow
AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string ar…
-
High 8.4CVE-2011-10027 Public exploit
AOL Desktop 9.6 RTX Stack-Based Buffer Overflow
AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy opera…