CVE-2006-5820 | Vulnerability Database | Aqua Security

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

Affected Software

Name	Vendor	Start Version	End Version
Aol	Aol	9.0 (including)	9.0 (including)

References

http://osvdb.org/34318
http://secunia.com/advisories/24714
http://securityreason.com/securityalert/2513
http://www.kb.cert.org/vuls/id/478225
http://www.securityfocus.com/archive/1/464313/100/0/threaded
http://www.securityfocus.com/bid/23224
http://www.tippingpoint.com/security/advisories/TSRT-07-03.html
http://www.vupen.com/english/advisories/2007/1184
https://exchange.xforce.ibmcloud.com/vulnerabilities/33347
http://osvdb.org/34318
http://secunia.com/advisories/24714
http://securityreason.com/securityalert/2513
http://www.kb.cert.org/vuls/id/478225
http://www.securityfocus.com/archive/1/464313/100/0/threaded
http://www.securityfocus.com/bid/23224
http://www.tippingpoint.com/security/advisories/TSRT-07-03.html
http://www.vupen.com/english/advisories/2007/1184
https://exchange.xforce.ibmcloud.com/vulnerabilities/33347

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-5820
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html