CVE-2006-6442

The connected advisories confirm CVE-2006-6442 affects the Gracenote CDDBControl ActiveX control (cddbcontrol.dll) used in AOL software. A stack-based buffer overflow in SetClientInfo allows remote attackers to execute arbitrary code by providing a long ClientId/option string. Impact is remote co...

AOL ActiveX element buffer overflow

Buffer overflow in CDDBControlAOL.CDDBAOLControl ActiveX control...