CVE-2006-6442: Aol Client Software

High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.

Affected products

• Aol Aol Client Software: version 7.0_4114.563 only; version 8.0_4129.230 only; version 9.0 only

Published 2006-12-10. Last modified 2026-06-16.