AOL.Radio.ActiveX.Remote.Stack.Overflow

Description

This indicates an attempt to exploit a buffer overflow vulnerability in the AOL AmpX ActiveX control.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious "SetLaunchURLEXE", "SavePlaylist", "SetProxy" property or "AppendFileToPlayList()" method. It allows a remote attacker to execute arbitrary code via a crafted web page.

Affected Products

AOL Radio
AOL AmpX.dll 2.6.1.11

Impact

System Compromise: remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the patch available from the web site:

References