CVE-2006-3134

CVE-2006-3134

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 11%
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
Affected products
n/a · n/a
References
http://europe.nokia.com/nokia/0%2C%2C93034%2C00.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.htmlhttp://secunia.com/advisories/20861http://secunia.com/advisories/20862http://securitytracker.com/id?1016389https://exchange.xforce.ibmcloud.com/vulnerabilities/27416http://www.gracenote.com/sec062706/SonySecurityNotification.htmlhttp://www.kb.cert.org/vuls/id/701121http://www.osvdb.org/26874http://www.securityfocus.com/bid/18678http://www.vupen.com/english/advisories/2006/2562http://www.vupen.com/english/advisories/2006/2563