CVE-2011-10027: Aol Inc Aol Desktop

High severity, CVSS 8.4. EPSS: 0.6% chance of exploitation in the next 30 days.

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to execute arbitrary code when a victim opens a malicious .rtx file. AOL Desktop is end-of-life and no longer supported. Users are encouraged to migrate to AOL Desktop Gold or alternative platforms.

Affected products

• Aol Inc Aol Desktop: up to and including 9.6

Published 2025-08-20. Last modified 2026-06-16.