CVE-2008-4384

Iseemedia Lpviewer - Memory Corruption

Title source: rule
STIX 2.1

Description

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16571
metasploit WORKING POC NORMAL
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/lpviewer_url.rb

Scores

EPSS 0.6500
EPSS Percentile 98.5%

Details

CWE
CWE-119
Status published
Products (3)
iseemedia/lpviewer
mgi_software/lpviewer
roxio/lpviewer
Published Oct 07, 2008
Tracked Since Feb 18, 2026