CVE-2006-0948: Aol

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.

Affected products

  • Aol Aol: version 9.0_4184.2340 only

Published 2006-08-21. Last modified 2026-06-16.