← Vulnerability feed

Vulnerability record · CVE-2006-0948 · published 21 August 2006

CVE-2006-0948: Aol vulnerability

Aol · Aol

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.

7.2 CVSS 2.0 High EPSS 0.36% · top 72.7%
7.2CVSS 2.0 base score
0.36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/18734 PatchVendor Advisory
http://secunia.com/secunia_research/2006-08
http://securityreason.com/securityalert/1416
http://securitytracker.com/id?1016717 Patch
http://www.osvdb.org/27995
http://www.securityfocus.com/archive/1/443622/100/0/threaded
http://www.securityfocus.com/bid/19583 Patch
http://www.vupen.com/english/advisories/2006/3317
https://exchange.xforce.ibmcloud.com/vulnerabilities/28445
http://secunia.com/advisories/18734 PatchVendor Advisory
http://secunia.com/secunia_research/2006-08
http://securityreason.com/securityalert/1416
http://securitytracker.com/id?1016717 Patch
http://www.osvdb.org/27995
http://www.securityfocus.com/archive/1/443622/100/0/threaded
http://www.securityfocus.com/bid/19583 Patch
http://www.vupen.com/english/advisories/2006/3317
https://exchange.xforce.ibmcloud.com/vulnerabilities/28445

Track CVE-2006-0948 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2006-5820Aol vulnerabilityThe LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function …EPSS 8.4%7.5CVE-2006-5501Aol vulnerabilityBuffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote …EPSS 3.4%7.5CVE-2006-5502Aol vulnerabilityHeap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition all…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2006-0948), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.