CVEvulnerability
CVE-2008-4384
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Affected configurations
• iseemedia lpviewer
• mgi software lpviewer
• roxio lpviewer
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/32140 Vendor Advisory
- http://www.kb.cert.org/vuls/id/848873 US Government Resource
- http://www.securityfocus.com/bid/31604 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2749 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45699 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32140 Vendor Advisory
- http://www.kb.cert.org/vuls/id/848873 US Government Resource
- http://www.securityfocus.com/bid/31604 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2749 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45699 exchange.xforce.ibmcloud.com