CVE-2008-4384
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll),...
CVE-2008-4384 is a high vulnerability (CVSS 9.3) in Iseemedia Lpviewer, published October 7, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 28.7%, the 98th percentile. No source names a fixed version.
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
- Record
CVE-2008-4384- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
- Record
CVE-2008-4384- Updated
- 2026-11-02
EUVDEUVD-2008-4365 No score
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
- Record
EUVD-2008-4365- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87xj-5h7p-x95f No score
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll),...
Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.
- Record
GHSA-87xj-5h7p-x95f- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | iseemedia / Roxio / MGI Software LPViewer - ActiveX Control Buffer Overflow (Metasploit) | 2010-05-09 |
| Metasploit | iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow | 2008-10-06 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |