CVE-2006-3888

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-10 · updated 2026-06-16

Description

Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.

Affected products

AOL Ygp Pic Downloader Activex Control: all versions

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420
http://secunia.com/advisories/22304
http://securitytracker.com/id?1017024
http://www.kb.cert.org/vuls/id/661524
http://www.kb.cert.org/vuls/id/MIMG-6MUUJ8
http://www.securityfocus.com/bid/20425
http://www.securityfocus.com/bid/20472
http://www.vupen.com/english/advisories/2006/3967
https://exchange.xforce.ibmcloud.com/vulnerabilities/29410
https://exchange.xforce.ibmcloud.com/vulnerabilities/29494
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=420
http://secunia.com/advisories/22304

Get alerted when CVE-2006-3888 or the next vulnerability affects your stack