CVE-2007-6699: Aol Ygp Piceditor Activex Control

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values.

Affected products

• Aol Ygp Piceditor Activex Control: version 9.5.1.8 only

Published 2008-02-04. Last modified 2026-06-16.