Will Dormann has reported a vulnerability in AOL Radio, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in AOLMediaPlaybackControl.exe and can be exploited to cause a stack-based buffer overflow by e.g. using the "AppendFileToPlayList()" method of the AmpX ActiveX control.

Successful exploitation allows execution of arbitrary code.

Solution
The vendor has reportedly issued updates to fix the vulnerability.

Provided and/or discovered by
Will Dormann, CERT/CC

Original Advisory
US-CERT VU#568681:
http://www.kb.cert.org/vuls/id/568681

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers