CVE-2006-6442

no score yetEPSS 5.5%

aol aol client software: no CVSS score yet. EPSS 5.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2006-12-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

aol:aol_client_software

References

http://attrition.org/pipermail/vim/2006-December/001173.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051230.html
http://secunia.com/advisories/23043
http://secunia.com/secunia_research/2006-69/advisory/
http://securitytracker.com/id?1017357

Check your stack JSON