← Vulnerability feed

Vulnerability record · CVE-2006-5501 · published 25 October 2006

CVE-2006-5501: Aol vulnerability

Aol · Aol

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.

7.5 CVSS 2.0 High EPSS 3.4% · top 11.5%
7.5CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430 PatchVendor Advisory
http://secunia.com/advisories/22567
http://securitytracker.com/id?1017121
http://www.securityfocus.com/bid/20745
http://www.vupen.com/english/advisories/2006/4197
https://exchange.xforce.ibmcloud.com/vulnerabilities/29797
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430 PatchVendor Advisory
http://secunia.com/advisories/22567
http://securitytracker.com/id?1017121
http://www.securityfocus.com/bid/20745
http://www.vupen.com/english/advisories/2006/4197
https://exchange.xforce.ibmcloud.com/vulnerabilities/29797

Track CVE-2006-5501 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2006-5820Aol vulnerabilityThe LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function …EPSS 8.4%7.5CVE-2006-5502Aol vulnerabilityHeap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition all…EPSS 3.4%7.2CVE-2006-0948Aol vulnerabilityAOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9…EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2006-5501), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.