Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.
Search vulnerabilities
CVE-2007-0443
CVSS 2.0 · 9.3 Critical
EPSS 7.1%
KEV · Not listed
Vendors
Products
CVE-1999-1240
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message.
CVSS 2.0 · 7.5 High
EPSS 2.0%
KEV · Not listed
Vendors
Products
CVE-2006-3134
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
CVSS 2.0 · 9.3 Critical
EPSS 11.2%
KEV · Not listed
Vendors
Products
CVE-2015-2004
The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVSS 3.0 · 9.8 Critical
EPSS 2.0%
KEV · Not listed
Vendors
Products
Page 1 of 1.