CVE-2006-3888 json
Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), a…
published 2006-10-10 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3882
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.1%
- EPSS 6.1% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll), as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method.
Exploit prediction
6.12% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
vupen.com
/english/advisories/2006/3967
vdb-entry
-
securityfocus.com
/bid/20472
vdb-entry
- kb.cert.org /vuls/id/MIMG-6MUUJ8
-
securitytracker.com
/id?1017024
vdb-entry
-
kb.cert.org
/vuls/id/661524
third-party-advisory, us-government-resource
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=420
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/29410
vdb-entry
-
securityfocus.com
/bid/20425
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/29494
vdb-entry
-
secunia.com
/advisories/22304
third-party-advisory
Sources
- CVE List CVE-2006-3888
- NVD CVE-2006-3888
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.