Lucene search
HistoryOct 07, 2008 - 8:00 p.m.
CVE-2008-4384
cve-2008-4384
buffer overflow
mgi software
lpviewer
activex
remote code execution
7.5 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.611 Medium
EPSS
Percentile
97.8%
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Affected configurations
Node
iseemedialpviewer
ORmgi_softwarelpviewer
ORroxiolpviewer
| CPE | Name | Operator | Version |
|---|---|---|---|
| iseemedia:lpviewer | iseemedia lpviewer | eq | * |
| mgi_software:lpviewer | mgi software lpviewer | eq | * |
| roxio:lpviewer | roxio lpviewer | eq | * |
Related
packetstorm
packetstorm
iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow
2009-11-26 00:00:00
seebug
seebug
iseemedia 'LPControl.dll' LPViewer ActiveXζ§δ»Άε€δΈͺηΌε²εΊζΊ’εΊζΌζ΄
2008-10-08 00:00:00
saint
saint
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
cert
cert
prion
prion
Stack overflow
2008-10-07 20:00:00
nvd
nvd
CVE-2008-4384
2008-10-07 20:00:17
checkpoint_advisories
checkpoint_advisories
iseemedia LPViewer ActiveX Control Multiple Buffer Overflows (CVE-2008-4384)
2008-11-18 00:00:00
nessus
nessus
LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities
2008-10-22 00:00:00
cvelist
cvelist
CVE-2008-4384
2008-10-07 18:27:00
7.5 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.611 Medium
EPSS
Percentile
97.8%
Related for CVE-2008-4384