CVE-2007-0443 json
Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary…
published 2007-04-24 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0443
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.1%
- EPSS 7.1% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
Multiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418 allow remote attackers to execute arbitrary code via long values for certain Proxy configuration parameters.
Patch / fix
- securityfocus.com/bid/23567 patch
- zerodayinitiative.com/advisories/ZDI-07-021.html advisory
- secunia.com/advisories/22924 advisory
Exploit prediction
7.10% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
-
securityfocus.com
/bid/23567
vdb-entry, patch
-
zerodayinitiative.com
/advisories/ZDI-07-021.html
patch, vendor-advisory
-
secunia.com
/advisories/22924
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/archive/1/466403/100/0/threaded
mailing-list
- gracenote.com /corporate/FAQs.html/faqset=update/page=0
-
exchange.xforce.ibmcloud.com
/vulnerabilities/33773
vdb-entry
-
osvdb.org
/34327
vdb-entry
-
vupen.com
/english/advisories/2007/1475
vdb-entry
-
securitytracker.com
/id?1017937
vdb-entry
Sources
- CVE List CVE-2007-0443
- NVD CVE-2007-0443
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.