Unrated severityNVD Advisory· Published Oct 7, 2008· Updated Jun 16, 2026

CVE-2008-4384

Description

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Roxio/Lpviewer3 versions
cpe:2.3:a:iseemedia:lpviewer:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:iseemedia:lpviewer:*:*:*:*:*:*:*:*
- cpe:2.3:a:mgi_software:lpviewer:*:*:*:*:*:*:*:*
- cpe:2.3:a:roxio:lpviewer:*:*:*:*:*:*:*:*
Roxio/LPViewer ActiveX controlllm-create

Patches

Vulnerability mechanics

References

secunia.com/advisories/32140nvdVendor Advisory
www.kb.cert.org/vuls/id/848873nvdUS Government Resource
www.securityfocus.com/bid/31604nvd
www.vupen.com/english/advisories/2008/2749nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45699nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.023
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000