EIP-2026-115362

This exploit demonstrates a stack-based buffer overflow in Gracenote CDDBControl ActiveX control via a long string passed to the ViewProfile method. It can lead to arbitrary code execution in the context of the application (e.g., Internet Explorer).