CVE-2008-4384
LPViewer ActiveX Control - Stack-Based Buffer Overflow via url/toolbar/enableZoomPastMax Methods
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4384.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/lpviewer_url.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the LPViewer ActiveX control (LPControll.dll 3.2.0.2) by sending an overly long string to the URL() property, allowing arbitrary code execution. It uses a Metasploit module to generate and deliver the payload via an HTTP server.
Description
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Exploits (2)
This exploit targets a stack buffer overflow in the LPViewer ActiveX control (LPControll.dll 3.2.0.2) by sending an overly long string to the URL() property, allowing arbitrary code execution. It uses a Metasploit module to generate and deliver the payload via an HTTP server.
This Metasploit module exploits a stack buffer overflow in the LPViewer ActiveX control (LPControll.dll 3.2.0.2) by sending an overly long string to the URL() property, leading to arbitrary code execution.