Lucene search
HistoryOct 07, 2008 - 8:00 p.m.
CVE-2008-4384
cve-2008-4384
buffer overflow
mgi software
lpviewer
activex
remote code execution
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.611 Medium
EPSS
Percentile
97.8%
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Affected configurations
Node
iseemedialpviewer
ORmgi_softwarelpviewer
ORroxiolpviewer
| CPE | Name | Operator | Version |
|---|---|---|---|
| iseemedia:lpviewer | iseemedia lpviewer | eq | * |
| mgi_software:lpviewer | mgi software lpviewer | eq | * |
| roxio:lpviewer | roxio lpviewer | eq | * |
Related
packetstorm
packetstorm
iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow
2009-11-26 00:00:00
seebug
seebug
iseemedia 'LPControl.dll' LPViewer ActiveXζ§δ»Άε€δΈͺηΌε²εΊζΊ’εΊζΌζ΄
2008-10-08 00:00:00
cert
cert
saint
saint
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
LPViewer ActiveX Control url property buffer overflow
2008-11-21 00:00:00
prion
prion
Stack overflow
2008-10-07 20:00:00
nvd
nvd
CVE-2008-4384
2008-10-07 20:00:17
nessus
nessus
LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities
2008-10-22 00:00:00
checkpoint_advisories
checkpoint_advisories
iseemedia LPViewer ActiveX Control Multiple Buffer Overflows (CVE-2008-4384)
2008-11-18 00:00:00
cvelist
cvelist
CVE-2008-4384
2008-10-07 18:27:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.611 Medium
EPSS
Percentile
97.8%
Related for CVE-2008-4384