CVE-2008-4384: Iseemedia Lpviewer

High severity, CVSS 9.3. EPSS: 28.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll), as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the (1) url, (2) toolbar, and (3) enableZoomPastMax methods.

Affected products

• Iseemedia Lpviewer: any version
• Mgi Software Lpviewer: any version
• Roxio Lpviewer: any version

Published 2008-10-07. Last modified 2026-06-16.