Secunia

A vulnerability has been reported in AOL, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

The vulnerability is caused due to a boundary error in the YPG Picture Finder Tool ActiveX Control (YGPPicFinder.DLL). This can be exploited to cause a buffer overflow and may allow arbitrary code execution.

The vulnerability has been reported in AOL 8.0, 8.0 Plus, and 9.0 Classic. The vulnerable control was also distributed via the You've Got Pictures website prior to 2004.

Solution
Update to AOL 9.0 Optimized and AOL 9.0 Security Edition or apply hotfix.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Richard M. Smith.

Changelog
Further details available in Customer Area

Original Advisory
US-CERT VU#715730:
http://www.kb.cert.org/vuls/id/715730

Deep Links
Links available in Customer Area