CVE-2007-0443 in CDDBControl ActiveX control

Summary

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/23/2007
• Disclosure: 04/24/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-36315
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 10.0
• EPSS: 0.13949
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0443
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0443
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0443/