CVE-2007-0443

Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.

• http://osvdb.org/34327
• http://secunia.com/advisories/22924Patch, Vendor Advisory
• http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0
• http://www.securityfocus.com/archive/1/466403/100/0/threaded
• http://www.securityfocus.com/bid/23567Patch
• http://www.securitytracker.com/id?1017937
• http://www.vupen.com/english/advisories/2007/1475
• http://www.zerodayinitiative.com/advisories/ZDI-07-021.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33773
• http://osvdb.org/34327
• http://secunia.com/advisories/22924Patch, Vendor Advisory
• http://www.gracenote.com/corporate/FAQs.html/faqset=update/page=0
• http://www.securityfocus.com/archive/1/466403/100/0/threaded
• http://www.securityfocus.com/bid/23567Patch
• http://www.securitytracker.com/id?1017937
• http://www.vupen.com/english/advisories/2007/1475
• http://www.zerodayinitiative.com/advisories/ZDI-07-021.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33773

Published

Apr 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0434BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 t…
• CVE-2007-0435T-Com Speedport 500V routers with firmware 1.31 allow remote…
• CVE-2007-0436Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Ins…
• CVE-2007-0437Multiple cross-site scripting (XSS) vulnerabilities in the s…
• CVE-2007-0441Unspecified vulnerability in HP OpenView Network Node Manage…
• CVE-2007-0442Unspecified vulnerability in IBM OS/400 R530 and R535 has un…
• CVE-2007-0444Stack-based buffer overflow in the print provider library (c…
• CVE-2007-0445Heap-based buffer overflow in the arj.ppl module in the OnDe…
• CVE-2007-0446Stack-based buffer overflow in magentproc.exe for Hewlett-Pa…
• CVE-2007-0447Heap-based buffer overflow in the Decomposer component in mu…
• CVE-2007-0448The fopen function in PHP 5.2.0 does not properly handle inv…
• CVE-2007-0449Multiple buffer overflows in LGSERVER.EXE in CA BrightStor A…