• info
• discussion
• exploit
• solution
• references

AOL SB.SuperBuddy.1 ActiveX Control Remote Code Execution Vulnerability

AOL SB.SuperBuddy.1 ActiveX control is prone to a remote code-execution vulnerability.

An attacker can invoke the object from a malicious web page to trigger the condition. If the vulnerability is successfully exploited, the attacker may be able to exploit the condition to corrupt process memory, resulting in arbitrary code execution within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.