• info
• discussion
• exploit
• solution
• references

GraceNote CDDBControl Multple Parameters ActiveX Control Buffer Overflow Vulnerability

GraceNote CDDBControl ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities.

An attacker can invoke the object from a malicious web page to trigger the condition. If the vulnerabilities are successfully exploited, the attacker may be able to corrupt process memory and execute arbitrary code within the context of the affected application.