CVE-2008-4384

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

28.71% chance of exploitation in the next 30 days, 98th percentile

Published

2008-10-07

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/lpviewer_url.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16571

References

• CVE Record
• NVD entry

Related

• CVE-2008-4382
• CVE-2008-4385
• CVE-2008-4381
• CVE-2008-4388
• CVE-2008-4380
• CVE-2008-4393