CVE-2006-3888

{"id": "CVE-2006-3888", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-10-10T23:07:00.000", "references": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420", "source": "cret@cert.org"}, {"url": "http://secunia.com/advisories/22304", "source": "cret@cert.org"}, {"url": "http://securitytracker.com/id?1017024", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/661524", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/20425", "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/20472", "source": "cret@cert.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3967", "source": "cret@cert.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29410", "source": "cret@cert.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29494", "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el control ActiveX de AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), como el utilizado en la Edici\u00f3n de Seguridad America Online 9.0, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante el paso de un argumento largo al m\u00e9todo SetAlbumName."}], "lastModified": "2017-07-20T01:32:40.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aol:ygp_pic_downloader_activex_control:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F6B7286-87C3-4AB6-AAF8-682805120784"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}