Exploitation Summary
CVE-2007-6250 has been observed exploited in the wild (reported by VulnCheck KEV).
Description
Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39592
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28399
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019173
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0085
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27207
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/568681
Scores
EPSS
0.2434
EPSS Percentile
97.6%
Details
VulnCheck KEV
2010-05-01
CWE
CWE-119
Status
published
Products (2)
aol/aolmediaplaybackcontrol
microsoft/ampx
Published
Jan 09, 2008
Tracked Since
Feb 18, 2026