CVE-2007-0443 Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration paramete...
HighCVSS 9.3
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gracenote cddbcontrol activex control | All versions | No fix listed |
References
- 34327 vdb-entry
- 22924 patch third-party-advisory vendor-advisory
- www.gracenote.com
- 20070420 ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability mailing-list
- 23567 patch vdb-entry
- 1017937 vdb-entry
- ADV-2007-1475 vdb-entry
- www.zerodayinitiative.com patch vendor-advisory
- cddbcontrol-activex-bo(33773) vdb-entry