CVE-2006-3134

CVE-2006-3134 concerns the GraceNote CDDBControl ActiveX control. The vulnerability is a buffer overflow in the CDDB ActiveX object triggered by a long option string, allowing a remote attacker to execute arbitrary code on systems where the control is present. Affected vendors include AOL, Gracen...

CVE-2007-0443

The CVE-2007-0443 issue affects GraceNote’s CDDBControl ActiveX Control. The vulnerability is a buffer overflow in the ActiveX proxy-configuration parameters when long strings are supplied, which can allow remote code execution on affected Windows hosts. Exploitation requires the user to visit a ...