CVE-2008-4384: Buffer Overflow

Published Oct 7, 2008

Updated

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

Affected Software

3 affected components

iseemedia LPViewer

MGI Software LPViewer

Roxio LPViewer

Event History

Oct 7, 2008

CVE Published

via MITRE·06:27 PM

Data Sourced

via MITRE·06:27 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4384?

CVE-2008-4384 is considered critical due to its potential for remote code execution by attackers.

How do I fix CVE-2008-4384?

To mitigate CVE-2008-4384, update the affected software to the latest version provided by the vendor.

What software is affected by CVE-2008-4384?

CVE-2008-4384 affects the LPViewer ActiveX control from Iseemedia, MGI Software, and Roxio.

What types of attacks are possible with CVE-2008-4384?

Attackers can exploit CVE-2008-4384 to perform remote code execution through crafted input parameters.

What are the methods that introduce vulnerabilities in CVE-2008-4384?

The vulnerable methods in CVE-2008-4384 include url, toolbar, and enableZoomPastMax which can trigger stack-based buffer overflows.