CVE-2006-0316

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors.

• http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news
• http://secunia.com/advisories/18521Patch, Vendor Advisory
• http://securitytracker.com/id?1015494
• http://www.kb.cert.org/vuls/id/715730Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-6KRSQPVendor Advisory
• http://www.osvdb.org/22486
• http://www.securityfocus.com/bid/16262Patch
• http://www.vupen.com/english/advisories/2006/0221
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24160
• http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news
• http://secunia.com/advisories/18521Patch, Vendor Advisory
• http://securitytracker.com/id?1015494
• http://www.kb.cert.org/vuls/id/715730Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-6KRSQPVendor Advisory
• http://www.osvdb.org/22486
• http://www.securityfocus.com/bid/16262Patch
• http://www.vupen.com/english/advisories/2006/0221
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24160

Published

Jan 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0310Cross-site scripting (XSS) vulnerability in aoblogger 2.3 al…
• CVE-2006-0311SQL injection vulnerability in login.php in aoblogger 2.3 al…
• CVE-2006-0312create.php in aoblogger 2.3 allows remote attackers to bypas…
• CVE-2006-0313Multiple SQL injection vulnerabilities in PDFdirectory befor…
• CVE-2006-0314PDFdirectory before 1.0 stores sensitive data in plaintext, …
• CVE-2006-0315index.php in EZDatabase before 2.1.2 does not properly clean…
• CVE-2006-0317Cross-site scripting (XSS) vulnerability in rkrt_stats.php i…
• CVE-2006-0318SQL injection vulnerability in index.php in BlogPHP 1.0, whe…
• CVE-2006-0319Directory traversal vulnerability in the FTP server (port 22…
• CVE-2006-0320SQL injection vulnerability in admin/processlogin.php in Bit…
• CVE-2006-0321fetchmail 6.3.0 and other versions before 6.3.2 allows remot…
• CVE-2006-0322Unspecified vulnerability the edit comment formatting functi…