|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Windows >> AOL You've Got Pictures ActiveX Control Overflow Vulnerability Vulnerability Assessment Details
|
AOL You've Got Pictures ActiveX Control Overflow Vulnerability |
||
Checks for overflow vulnerability in AOL You've Got Pictures ActiveX control Detailed Explanation for this Vulnerability Assessment Summary : The remote Windows host has an ActiveX control that is affected by a buffer overflow vulnerability. Description : The remote host contains an ActiveX control from AOL called YPG Picture Finder Tool. It was distributed along with various versions of AOL's client software and from the You've Got Pictures web site prior to 2004. The 'YGPPicFinder.DLL' component of this control fails to limit the amount of user-supplied data copied to a finite buffer. This can be exploited using, say, a specially-crafted web page to overflow the buffer, crash the application using the control (typically Internet Explorer), and possibly execute arbitrary code subject to the user's rights. See also : http://www.kb.cert.org/vuls/id/715730 http://download.newaol.com/security/YGPClean.exe Solution : Download and run AOL's removal tool. Network Security Threat Level: High / CVSS Base Score : 7.0 (AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N) Networks Security ID: 16262 Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security |
||
Cables, Connectors |
Vintage 5362 IBM System/36 Mini-Computer Mainframe 5291 2, CRT Terminal DM12N501
$249.99
IBM Type 4869 External 5 1/4in Floppy Disk Drive Mainframe Collection
$89.00
IBM Type 4869 External 5 1/4in Floppy Disk Drive Mainframe Collection - UNTESTED
$65.00
Vintage Hewlett Packard HP 2100S Microprogrammable Computer System Mainframe #2
$1499.99
6 Vintage Computer Tape Reels mainframe 3200 5000 data ibm magnetic processor
$99.00
TANDY 1100FD LAPTOP Vintage 1989 w/ original power cord. WORKING CONDITION
$299.00
vintage lot of 3 computer tapes mainframe data ibm magnetic reels
$25.00
Commodore Amiga 500 Computer w/Mouse and Amiga A520 RF Modulator As Is Untested
$284.99
Xargon 1 Beyond Reality RARE Game Floppy 3.5” Floppy Mainframe Collection
$349.99
AlphaServer AlphaStation DS25 54-30466-31 CPU Board 1Ghz KN410-CA
$350.00
|
||
No Discussions have been posted on this vulnerability. |