CVE-2009-3658

ALTO 8.8CVE-2009-3658 · Published 09/10/2009 · updated 16/06/2026

In breve

CVE-2009-3658 è una vulnerabilità ALTO (CVSS 8.8) che riguarda superbuddy activex control (aol).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.9%, superiore al 95.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
superbuddy activex control aol	`= 9.5.0.1`	No fix yet

Description

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method.

References

retrogod.altervista.org/9sg_aol_91_superbuddy.html · Broken Link
secunia.com/advisories/36919 · Broken Link
securityfocus.com/archive/1/506889/100/0/threaded · Broken Link
securityfocus.com/bid/36580 · Broken Link
vupen.com/english/advisories/2009/2812 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/53614 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6704 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free