On Dec 25, 2007 5:29 PM, Elazar Broad <<a href="mailto:elazarb@earthlink.net">elazarb@earthlink.net</a>> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
The AOL YGP Picture Editor Control(AIM PicEditor Control) version <a href="http://9.5.1.8" target="_blank">9.5.1.8</a> suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows:
<br></blockquote></div><br><br>How does a bunch of 'A's prove something is exploitable?<br>