CVE-2006-3134
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use...
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
- Record
CVE-2006-3134- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
- Record
CVE-2006-3134- Updated
- 2026-11-02
EUVDEUVD-2006-3131 No score
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
- Record
EUVD-2006-3131- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56wc-4p8m-cfff No score
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use...
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
- Record
GHSA-56wc-4p8m-cfff- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3134 is a high vulnerability (CVSS 9.3) in Gracenote Cddbcontrol Activex Control, published June 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.2%, the 95th percentile. No source names a fixed version.
References
europe.nokia.com/nokia/0%2C%2C93034%2C00.html
securityfocus.com/bid/18678
lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.html
osvdb.org/26874
vupen.com/english/advisories/2006/2562
kb.cert.org/vuls/id/701121
Show 10 moreShow less
zerodayinitiative.com/advisories/ZDI-06-019.html
gracenote.com/sec062706/SonySecurityNotification.html
secunia.com/advisories/20861
securitytracker.com/id?1016389
exchange.xforce.ibmcloud.com/vulnerabilities/27416
nvd.nist.gov/vuln/detail/CVE-2006-3134
github.com/advisories/GHSA-56wc-4p8m-cfff