CVE-2006-5820: Aol

High severity, CVSS 9.3. EPSS: 8.4% chance of exploitation in the next 30 days.

The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value.

Affected products

• Aol Aol: version 9.0 only

Published 2007-04-02. Last modified 2026-06-16.