Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2006-3134 to a friend New vulnerability? New tool? Tell us	CVE-2006-3134 GraceNote CDDBControl ActiveX Control Remote Buffer Overflow Vulnerability     Credit: The information has been provided by Peter Vreugdenhi The original article can be found at: http://www.securityfocus.com/bid/18678/info Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2006-3134 Details Check for CVE-2006-3134 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Sony SonicStage Mastering Studio 2.2.1  * Sony SonicStage Mastering Studio 2.2  * Sony SonicStage Mastering Studio 2.1.1  * Sony SonicStage Mastering Studio 2.1  * Sony SonicStage 3.4  * Sony SonicStage 3.3  * Sony CONNECT Player 0  * Nokia PC Suite 6.8  * Nokia PC Suite 6.7  * Justsystem BeatJam 2006  * GraceNote CDDBControl ActiveX 0  * AOL Client Software 9.0 Security  * AOL Client Software 8.0  * AOL Client Software 7.0 GraceNote CDDBControl ActiveX control is prone to a buffer-overflow vulnerability because the software fails to sufficiently bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Invoking the object from a malicious website or HTML email may trigger the condition. A successful exploit would corrupt process memory and allow arbitrary code to run in the context of the client application using the affected ActiveX control. The following versions include the vulnerable software:  * AOL 7.0 revision 4114.563  * AOL 8.0 4129.230  * AOL 9.0 Security Edition revision 4156.910 Other versions may also be affected. Vendor Status: Nokia had issued an update for this vulnerability . CVE Information: CVE-2006-3134  Comments on CVE-2006-3134:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®