{
    "id": "CVE-2008-4384",
    "published": "2008-10-07 20:00:17",
    "last_modified": "2026-06-16 22:57:42",
    "cvss_score": "9.3",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "cwe": "CWE-119",
    "description": "Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.",
    "epss_score": "0.28706",
    "epss_percentile": "0.98084",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-29 18:17:07",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "iseemedia",
            "product": "lpviewer"
        },
        {
            "vendor": "mgi_software",
            "product": "lpviewer"
        },
        {
            "vendor": "roxio",
            "product": "lpviewer"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "16571",
            "title": "iseemedia / Roxio / MGI Software LPViewer - ActiveX Control Buffer Overflow (Metasploit)",
            "date": "2010-05-09",
            "url": "https://www.exploit-db.com/exploits/16571"
        }
    ],
    "refs_list": [
        "http://secunia.com/advisories/32140",
        "http://www.kb.cert.org/vuls/id/848873",
        "http://www.securityfocus.com/bid/31604",
        "http://www.vupen.com/english/advisories/2008/2749",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/45699",
        "http://secunia.com/advisories/32140",
        "http://www.kb.cert.org/vuls/id/848873",
        "http://www.securityfocus.com/bid/31604",
        "http://www.vupen.com/english/advisories/2008/2749",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/45699"
    ]
}