medium4.3Public exploit code
CVE-2007-6699
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities2007-12-25 · dos · windows · Verified
Impact
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Ygp Piceditor Activex Control | Version 9.5.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/41198
- http://seclists.org/fulldisclosure/2007/Dec/0561.html
- http://seclists.org/fulldisclosure/2007/Dec/0574.html
- http://www.securityfocus.com/bid/27026
- http://www.securitytracker.com/id?1019143
- http://osvdb.org/41198
- http://seclists.org/fulldisclosure/2007/Dec/0561.html
- http://seclists.org/fulldisclosure/2007/Dec/0574.html
- http://www.securityfocus.com/bid/27026
- http://www.securitytracker.com/id?1019143