CVE-2006-5820

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)2007-04-04 · remote · windows · Verified

Impact

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

Affected products

References

• NVD record
• CVE.org record
• http://osvdb.org/34318
• http://secunia.com/advisories/24714
• http://securityreason.com/securityalert/2513
• http://www.kb.cert.org/vuls/id/478225
• http://www.securityfocus.com/archive/1/464313/100/0/threaded
• http://www.securityfocus.com/bid/23224
• http://www.tippingpoint.com/security/advisories/TSRT-07-03.html
• http://www.vupen.com/english/advisories/2007/1184
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33347
• http://osvdb.org/34318
• http://secunia.com/advisories/24714
• http://securityreason.com/securityalert/2513
• http://www.kb.cert.org/vuls/id/478225
• http://www.securityfocus.com/archive/1/464313/100/0/threaded
• http://www.securityfocus.com/bid/23224
• http://www.tippingpoint.com/security/advisories/TSRT-07-03.html
• http://www.vupen.com/english/advisories/2007/1184
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33347