CVE-2007-6699
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2)…
Does this matter?
Lower severity and a low EPSS score (4.50%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
- EPSS
- 4.50% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- aol/ygp piceditor activex control
- Source
- cve@mitre.org
References
- http://osvdb.org/41198
- http://seclists.org/fulldisclosure/2007/Dec/0561.htmlExploit
- http://seclists.org/fulldisclosure/2007/Dec/0574.html
- http://www.securityfocus.com/bid/27026Exploit
- http://www.securitytracker.com/id?1019143
- http://osvdb.org/41198
- http://seclists.org/fulldisclosure/2007/Dec/0561.htmlExploit
- http://seclists.org/fulldisclosure/2007/Dec/0574.html
- http://www.securityfocus.com/bid/27026Exploit
- http://www.securitytracker.com/id?1019143
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.