← Vulnerability feed

Vulnerability record · CVE-2007-0443 · published 24 April 2007

CVE-2007-0443: Gracenote cddbcontrol activex control vulnerability

Gracenote · Cddbcontrol Activex Control

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.

9.3 CVSS 2.0 High EPSS 7.1% · top 6.0%
9.3CVSS 2.0 base score
7.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/34327
http://secunia.com/advisories/22924 PatchVendor Advisory
http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0
http://www.securityfocus.com/archive/1/466403/100/0/threaded
http://www.securityfocus.com/bid/23567 Patch
http://www.securitytracker.com/id?1017937
http://www.vupen.com/english/advisories/2007/1475
http://www.zerodayinitiative.com/advisories/ZDI-07-021.html PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33773
http://osvdb.org/34327
http://secunia.com/advisories/22924 PatchVendor Advisory
http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0
http://www.securityfocus.com/archive/1/466403/100/0/threaded
http://www.securityfocus.com/bid/23567 Patch
http://www.securitytracker.com/id?1017937
http://www.vupen.com/english/advisories/2007/1475
http://www.zerodayinitiative.com/advisories/ZDI-07-021.html PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33773

Track CVE-2007-0443 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2006-3134Gracenote cddbcontrol activex control vulnerabilityBuffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute ar…EPSS 11%

Source: NIST National Vulnerability Database (record CVE-2007-0443), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.