Description
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
References
- http://europe.nokia.com/nokia/0%2C%2C93034%2C00.html
- 18678 vdb-entry
- 20060627 ZDI-06-019: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability mailing-list
- 26874 vdb-entry
- ADV-2006-2562 vdb-entry
- VU#701121 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-019.html
- ADV-2006-2563 vdb-entry
- http://www.gracenote.com/sec062706/SonySecurityNotification.html
- 20861 third-party-advisory
- 1016389 vdb-entry
- gracenote-cddb-activex-bo(27416) vdb-entry
- 20862 third-party-advisory