NVD

Id
64987  
Name
CVE-2006-6442  
Description
Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-10  
Modified Date
2011-03-07  
Seq
2006-6442  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339237 64987 CVE-2006-6442 20061211 GraceNote CDDBControl (CVE-2006-3134) = CDDBAOLControl (CVE-2006-6442)  View
339238 64987 CVE-2006-6442 20061211 Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow  View
339239 64987 CVE-2006-6442 1017357  View
339240 64987 CVE-2006-6442 20061211 Secunia Research: AOL CDDBControl ActiveX Control"SetClientInfo()" Buffer Overflow  View
339241 64987 CVE-2006-6442 21488  View
339242 64987 CVE-2006-6442 ADV-2006-4904  View
339243 64987 CVE-2006-6442 aol-cddbcontrol-bo(30790)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59452 JVNDB-2006-001718 AOL などの製品で使用される cddbcontrol.dll におけるスタックベースのバッファオーバーフローの脆弱性 America Online (AOL) などの製品で使用される CDDBControlAOL.CDDBAOLControl ActiveX コントロール (cddbcontrol.dll) の SetClientInfo 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-6442 22544 CVE-2006-6442 64987 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001718.html 2006-12-10 2012-06-26 View