Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Windows --> Category: infos

AOL You've Got Pictures ActiveX Control Overflow Vulnerability Vulnerability Scan

Vulnerability Scan Summary
Checks for overflow vulnerability in AOL You've Got Pictures ActiveX control

Detailed Explanation for this Vulnerability Test

Synopsis :

The remote Windows host has an ActiveX control that is affected by a
buffer overflow vulnerability.

Description :

The remote host contains an ActiveX control from AOL called YPG
Picture Finder Tool. It was distributed along with various versions
of AOL's client software and from the You've Got Pictures web site
prior to 2004. The 'YGPPicFinder.DLL' component of this control fails
to limit the amount of user-supplied data copied to a finite buffer.
This can be exploited using, say, a specially-crafted web page to
overflow the buffer, crash the application using the control
(typically Internet Explorer), and possibly execute arbitrary code
subject to the user's rights.

See also :

Solution :

Download and run AOL's removal tool.

Threat Level:

High / CVSS Base Score : 7.0

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.