CVE-2008-4384 Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2...
HighCVSS 9.3
EPSS 28.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iseemedia lpviewer | All versions | No fix listed |
| mgi software lpviewer | All versions | No fix listed |
| roxio lpviewer | All versions | No fix listed |
References
- 32140 third-party-advisory vendor-advisory
- VU#848873 third-party-advisory us-government-resource
- 31604 vdb-entry
- ADV-2008-2749 vdb-entry
- lpviewer-lpcontrol-activex-bo(45699) vdb-entry