PT-2006-4029 · Gracenote · Gracenote Cddbcontrol Activex Control

Peter Vreugdenhil · Publicado 2006-06-27 · Atualizado 2017-07-20 · CVE-2006-3134

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gracenote CDDBControl ActiveX Control (affected versions not specified)

Description The issue is related to a buffer overflow in the Gracenote CDDBControl ActiveX Control, which is used by multiple products that utilize Gracenote CDDB. This allows remote attackers to execute arbitrary code via a long option string.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3134

Produtos afetados

Gracenote Cddbcontrol Activex Control

Referências · 14

• http://securitytracker.com/id?1016389 · Nota
• http://europe.nokia.com/nokia/0%2C%2C93034%2C00.html · Nota
• http://vupen.com/english/advisories/2006/2562 · Nota
• http://osvdb.org/26874 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3134 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2563 · Nota
• http://secunia.com/advisories/20861 · Nota
• http://secunia.com/advisories/20862 · Nota
• http://securityfocus.com/bid/18678 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27416 · Nota
• http://kb.cert.org/vuls/id/701121 · Nota
• http://zerodayinitiative.com/advisories/ZDI-06-019.html · Aviso do Fabricante
• http://gracenote.com/sec062706/SonySecurityNotification.html · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.html · Nota