CVE-2008-4384 in LPViewer

Summary

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 10/02/2008
• Disclosure: 10/07/2008
• Moderation: VulDB entry created
• Entries: VDB-44374 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 10.0
• EPSS: 0.65003
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-4384
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-4384
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-4384/