CVE-2007-0443: Undefined Security Weakness

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters...

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-021.html April 19, 2007 -- CVE ID: CVE-2007-0443 -- Affected Vendor: GraceNote -- Affected Products: CDDBControl ActiveX Control -- TippingPointTM IPS Customer Protection:...

CVE-2006-3134: Undefined Security Weakness

Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string...