Description
Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.
References
- 23567 vdb-entry
- 20070420 ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability mailing-list
- http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0
- cddbcontrol-activex-bo(33773) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-021.html
- 34327 vdb-entry
- ADV-2007-1475 vdb-entry
- 22924 third-party-advisory
- 1017937 vdb-entry