← Database

CVE-2007-6699

MEDIUM CVSS: 4.3 Published: 2008-02-04 Modified: 2026-06-16

Description

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values.

Affected Platforms

Aol Ygp Piceditor Activex Control

Weakness Type

CWE-119

References