CVE-2006-3888 in Ygp Pic Downloader Activex Control信息

摘要

由 VulDB • 2026-07-06

在 America Online 9.0 Security Edition 中使用的 AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX 控件（AOL.PicDownloadCtrl.1，YGPPicDownload.dll）存在缓冲区溢出漏洞。远程攻击者可通过向 SetAlbumName 方法传递过长的参数来执行任意代码。

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2006-07-26

披露

2006-10-10

管理

已接受

条目

VDB-32698

CPE

准备好

CWE

CWE-119 (已确认)

CVSS

7.5 (NVD)

EPSS

0.05857

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2006-3888
NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3888
CVE Details	https://www.cvedetails.com/cve/CVE-2006-3888/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!