Description
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16571
metasploit
WORKING POC
NORMAL
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/lpviewer_url.rb
References (5)
Scores
EPSS
0.6500
EPSS Percentile
98.5%
Details
CWE
CWE-119
Status
published
Products (3)
iseemedia/lpviewer
mgi_software/lpviewer
roxio/lpviewer
Published
Oct 07, 2008
Tracked Since
Feb 18, 2026