CVE-2007-6699 Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser cr...
MediumCVSS 4.3
EPSS 4.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aol ygp piceditor activex control | = 9.5.1.8 | No fix listed |
References
- 41198 vdb-entry
- 20071225 AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows exploit mailing-list
- 20071227 Re: AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows mailing-list
- 27026 exploit vdb-entry
- 1019143 vdb-entry