Aol Aol Client Software — known CVE vulnerabilities

Every CVE whose affected-product data names Aol Aol Client Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2006-0316 — CVSS 10.0 (critical): Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and…
• CVE-2006-6442 — CVSS 9.3 (critical): Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used…
• CVE-2007-1767 — CVSS 7.8 (high): Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial…
• CVE-2005-2597 — CVSS 7.2 (high): AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM…
• CVE-2006-0526 — CVSS 7.2 (high): The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a…