CVEvulnerability
CVE-2007-0443
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.
Affected configurations
• gracenote cddbcontrol activex control
References
- http://osvdb.org/34327 osvdb.org
- http://secunia.com/advisories/22924 Patch, Vendor Advisory
- http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0 www.gracenote.com
- http://www.securityfocus.com/archive/1/466403/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23567 Patch
- http://www.securitytracker.com/id?1017937 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1475 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-021.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33773 exchange.xforce.ibmcloud.com
- http://osvdb.org/34327 osvdb.org
- http://secunia.com/advisories/22924 Patch, Vendor Advisory
- http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0 www.gracenote.com
- http://www.securityfocus.com/archive/1/466403/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23567 Patch
- http://www.securitytracker.com/id?1017937 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1475 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-021.html Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33773 exchange.xforce.ibmcloud.com