CVE

Id
22546  
CVE No.
CVE-2006-6442  
Status
Candidate  
Description
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.  
Phase
Assigned (20061209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
217682 22546 CVE-2006-6442 BUGTRAQ:20061211 Secunia Research: AOL CDDBControl ActiveX Control"SetClientInfo()" Buffer Overflow  View
217683 22546 CVE-2006-6442 URL:http://www.securityfocus.com/archive/1/archive/1/454105/100/0/threaded  View
217684 22546 CVE-2006-6442 FULLDISC:20061211 Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow  View
217685 22546 CVE-2006-6442 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051230.html  View
217686 22546 CVE-2006-6442 VIM:20061211 GraceNote CDDBControl (CVE-2006-3134) = CDDBAOLControl (CVE-2006-6442)  View
217687 22546 CVE-2006-6442 URL:http://attrition.org/pipermail/vim/2006-December/001173.html  View
217688 22546 CVE-2006-6442 MISC:http://secunia.com/secunia_research/2006-69/advisory/  View
217689 22546 CVE-2006-6442 BID:21488  View
217690 22546 CVE-2006-6442 URL:http://www.securityfocus.com/bid/21488  View
217691 22546 CVE-2006-6442 VUPEN:ADV-2006-4904  View
217692 22546 CVE-2006-6442 URL:http://www.vupen.com/english/advisories/2006/4904  View
217693 22546 CVE-2006-6442 SECTRACK:1017357  View
217694 22546 CVE-2006-6442 URL:http://securitytracker.com/id?1017357  View
217695 22546 CVE-2006-6442 SECUNIA:23043  View
217696 22546 CVE-2006-6442 URL:http://secunia.com/advisories/23043  View
217697 22546 CVE-2006-6442 XF:aol-cddbcontrol-bo(30790)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59453 JVNDB-2006-001719 Nostra DivX Player におけるスタックベースのバッファオーバーフローの脆弱性 Nostra DivX Player には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-6444 22546 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001719.html  View