GraceNote CDDBControl ActiveX Control Buffer Overflow (CVE-2006-3134; CVE-2006-6442)

A vulnerability has been discovered in America Online AOL CDDB ActiveX Control. Gracenote CDDB ActiveX control contains a buffer overflow error that allows remote attackers to execute arbitrary code via a long option string. A remote attacker could exploit this flaw to execute arbitrary code and...

CVE-2006-3134

CVE-2006-3134 concerns the GraceNote CDDBControl ActiveX control. The vulnerability is a buffer overflow in the CDDB ActiveX object triggered by a long option string, allowing a remote attacker to execute arbitrary code on systems where the control is present. Affected vendors include AOL, Gracen...