CVE-2007-0443

Published: Apr 24, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.

Affected (1)

Products: Gracenote: Cddbcontrol Activex Control

Gracenote

1 product

Cddbcontrol Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gracenote Cddbcontrol Activex Control	All versions

References (18)

http://osvdb.org/34327

Source: cve@mitre.org

http://secunia.com/advisories/22924

Source: cve@mitre.org

PatchVendor Advisory

http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/466403/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23567

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1017937

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1475

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-07-021.html

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33773

Source: cve@mitre.org

http://osvdb.org/34327