VDB
CVE-2008-4384
CVE-2008-4384
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
EPSS 65.00% · 98.5th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
65.00%
98.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mgi_software | lpviewer | |
| n/a | n/a | n/a |
| roxio | lpviewer | |
| iseemedia | lpviewer |
Timeline
- Oct 7, 2008 CVE Published
- May 9, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jun 28, 2023 EPSS Score
References
- 32140 third-party-advisory
- 31604 vdb
- lpviewer-lpcontrol-activex-bo(45699) vdb
- VU#848873 third-party-advisory
- ADV-2008-2749 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2008-4384 advisory