CVE-2009-3658: Aol Superbuddy Activex Control

High severity, CVSS 8.8. EPSS: 8.9% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remote attackers to trigger memory corruption or possibly execute arbitrary code via a malformed argument to the SetSuperBuddy method.

Affected products

• Aol Superbuddy Activex Control: version 9.5.0.1 only

Published 2009-10-09. Last modified 2026-06-16.