CVE-2017-14627

CyberLink LabelPrint 2.5 (and below) is affected by a stack-based buffer overflow in processing .lpp project files. The vulnerability allows a remote attacker to execute arbitrary code via long values in the author, name, artist, or default fields inside INFORMATION, TRACK, or TEXT tags. Proof-of...

CVE-2012-4756

CVE-2012-4756 affects CyberLink LabelPrint 2.5.3602, where local users can gain privileges via untrusted search path using (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated by a directory containing a .lpp file. The issue stems from untrusted search paths allowin...