CVE-2006-5820

Published: Apr 2, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

Affected (1)

Products: Aol: Aol

Aol

1 product

Aol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aol Aol	Version 9.0

References (18)

http://osvdb.org/34318

Source: cve@mitre.org

http://secunia.com/advisories/24714

Source: cve@mitre.org

http://securityreason.com/securityalert/2513

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/478225

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/464313/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23224

Source: cve@mitre.org

http://www.tippingpoint.com/security/advisories/TSRT-07-03.html

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1184

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33347

Source: cve@mitre.org

http://osvdb.org/34318