CVE-2009-3658

Name of the Vulnerable Software and Affected Versions America Online (AOL) version 9.5.0.1

Description The issue is related to a use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control, which allows remote attackers to trigger memory corruption or possibly execute arbitrary code. This can be achieved by providing a malformed argument to the SetSuperBuddy method.

Recommendations For America Online (AOL) version 9.5.0.1, consider disabling the SetSuperBuddy method in the Sb.SuperBuddy.1 ActiveX control as a temporary workaround until a patch is available. Restrict access to the sb.dll library to minimize the risk of exploitation. Avoid using the SetSuperBuddy method with untrusted input until the issue is resolved.